sql-inject-reject

Express/HTTP middleware that inspects request URLs and bodies for SQL injection patterns (SQL keywords, special characters) and blocks them with a 403 response. Version 0.1.0, last updated in 2017, no recent releases. Provides four security levels (silent, typical, elevated, paranoid) with hierarchical checks. Intended as one layer of defense; not a substitute for proper query validation or parameterized queries. Minimal configuration, but very limited maintenance and community adoption.