Rename abc{% 444 %} 555 to {{constructor.constructor('alert(1)')()}} {%444-222%} {#444-222#} <% 444-222 %> # 444-222 # <%= 444-222 =%>