From 5dfc51f741dd805372a799c840e88ed2d63b39c0 Mon Sep 17 00:00:00 2001
From: Ishaan Jaffer <ishaanjaffer0324@gmail.com>
Date: Thu, 19 Feb 2026 14:52:48 -0800
Subject: [PATCH] add standalone SQL injection policy template

---
 .../policy_templates/sql_injection.yaml       | 128 ++++++++++++++++++
 1 file changed, 128 insertions(+)
 create mode 100644 litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/sql_injection.yaml

diff --git a/litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/sql_injection.yaml b/litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/sql_injection.yaml
new file mode 100644
index 00000000000..b225d7b0d60
--- /dev/null
+++ b/litellm/proxy/guardrails/guardrail_hooks/litellm_content_filter/policy_templates/sql_injection.yaml
@@ -0,0 +1,128 @@
+# SQL Injection Detection — Keyword-Based Policy Template
+# Detects SQL injection payloads embedded in user prompts.
+# Prevents LLM-connected tools/agents from generating malicious SQL.
+category_name: "sql_injection"
+description: "Detects SQL injection patterns in prompts to protect LLM-connected databases"
+default_action: "BLOCK"
+
+# IDENTIFIER WORDS — SQL verbs/clauses that signal a query manipulation attempt
+identifier_words:
+  - "select"
+  - "insert"
+  - "update"
+  - "delete"
+  - "drop"
+  - "alter"
+  - "create"
+  - "truncate"
+  - "exec"
+  - "execute"
+  - "union"
+  - "grant"
+  - "revoke"
+  - "shutdown"
+
+# ADDITIONAL BLOCK WORDS — when combined with identifier words, triggers blocking
+additional_block_words:
+  # SQL injection operators and syntax
+  - "or 1=1"
+  - "1=1"
+  - "information_schema"
+  - "sys.tables"
+  - "sysobjects"
+  - "pg_catalog"
+  - "pg_tables"
+
+  # Destructive targets
+  - "drop table"
+  - "drop database"
+  - "drop schema"
+  - "truncate table"
+  - "delete from"
+  - "alter table"
+
+  # Data exfiltration
+  - "union select"
+  - "union all select"
+  - "into outfile"
+  - "into dumpfile"
+  - "load_file"
+
+  # Privilege escalation
+  - "grant all"
+  - "grant select"
+  - "grant insert"
+  - "grant delete"
+
+# ALWAYS BLOCK — explicit SQL injection payloads (blocked regardless of context)
+# NOTE: avoid regex-special characters like ( ) [ ] { } in keywords,
+# because the content filter matches keywords via regex internally.
+always_block_keywords:
+  - keyword: "' or 1=1 --"
+    severity: "high"
+  - keyword: "' or '1'='1"
+    severity: "high"
+  - keyword: "'; drop table"
+    severity: "high"
+  - keyword: "'; drop database"
+    severity: "high"
+  - keyword: "union select null"
+    severity: "high"
+  - keyword: "union all select null"
+    severity: "high"
+  - keyword: "' or ''='"
+    severity: "high"
+  - keyword: "'; shutdown --"
+    severity: "high"
+  - keyword: "'; exec xp_cmdshell"
+    severity: "high"
+  - keyword: "'; exec sp_"
+    severity: "high"
+  - keyword: "into outfile"
+    severity: "high"
+  - keyword: "into dumpfile"
+    severity: "high"
+  - keyword: "load_file"
+    severity: "high"
+  - keyword: "information_schema.tables"
+    severity: "high"
+  - keyword: "information_schema.columns"
+    severity: "high"
+  - keyword: "' union select"
+    severity: "high"
+  - keyword: "order by 1--"
+    severity: "high"
+  - keyword: "having 1=1"
+    severity: "high"
+  - keyword: "group by 1--"
+    severity: "high"
+  - keyword: "waitfor delay"
+    severity: "medium"
+  - keyword: "benchmark"
+    severity: "medium"
+  - keyword: "xp_cmdshell"
+    severity: "high"
+  - keyword: "sp_addlogin"
+    severity: "high"
+  - keyword: "sp_addsrvrolemember"
+    severity: "high"
+
+# EXCEPTIONS — legitimate use cases
+exceptions:
+  - "how to prevent"
+  - "how to protect"
+  - "how to defend"
+  - "how do companies defend"
+  - "what is sql injection"
+  - "explain sql injection"
+  - "research on"
+  - "study on"
+  - "academic"
+  - "security research"
+  - "penetration testing"
+  - "security audit"
+  - "best practices"
+  - "how to validate"
+  - "how to sanitize"
+  - "parameterized queries"
+  - "prepared statements"