Citi Interview Question

polymorphism, arraylist, sql injection