It's for SQL, HTML, and shell. But idk how solving injection, a top on the OWASP list forever is considered "overkill".