SQL injection
SQL injection concerns untrusted input affecting database queries. The current public review does not submit injection payloads or inspect private database code.
Separate review needed
This topic is educational. The current engine does not directly test it. Arrange a separately scoped review when you need to assess it.
Keep the scope.
A blocked or unfinished check remains unverified. Review technical recommendations with the person operating the website and test changes before applying them to a live service.
Read the full methodology