>if the engraving resembles SQL content (e.g., “; DELETE FROM”) ... then the API crashes and returns an HTTP 403 code and an HTML error page as opposed to the expected JSON response

Poor Bobby Tables can't even get his name on his phone.