“I would bake it from the concept of the story level where you're doing a unit test for a SQL record push, but we can do a unit test for SQL injection.”

Transcript evidence from Jon McCoy -- The Mindset to Reverse Engineer.