Comment by cryptonector

The most important dialect of SQL we should get is SQL-with-no-literal-values so we can force the use of query parameters, and then not have SQLi.