Java 2: you can program anything you want but it has to be a function.

I would think that role is filled by constants.

Now, I don’t functional (at all), but if you call a function with no parameters, doesn’t it imply side effects?

How does this exploit work? I understand that inputs were not sanitized, but what did the injected code do?