Salesforce interview question

How do you look for SQL injections?