[
  { "name": "name; DROP TABLE account", "evidence": "contains ';'" },
  { "name": "a' OR '1'='1", "evidence": "contains '''" },
  { "name": "x;'", "evidence": "contains '''", "note": "markers are tested in order: the quote comes before the semicolon" },
  { "name": "col\"umn", "evidence": "contains '\"'" },
  { "name": "col`umn", "evidence": "contains '`'" },
  { "name": "name--x", "evidence": "contains '--'" },
  { "name": "name/*x", "evidence": "contains '/*'" },
  { "name": "name*/x", "evidence": "contains '*/'" },
  { "name": "a\\b", "evidence": "contains '\\'" },
  { "name": "count(id", "evidence": "contains '('" },
  { "name": "id)", "evidence": "contains ')'" },
  { "name": "a=1", "evidence": "contains '='" },
  { "name": "[name", "evidence": "contains '['" },
  { "name": "name]", "evidence": "contains ']'" },
  { "name": "a\u0001b", "evidence": "contains the control character U+0001" },
  { "name": "a\u001Fb", "evidence": "contains the control character U+001F" },
  { "name": "account UNION all", "evidence": "contains the SQL word 'UNION'" },
  { "name": "x select y", "evidence": "contains the SQL word 'SELECT'" },
  { "name": "t pg_sleep", "evidence": "contains the SQL word 'PG_SLEEP'" },
  { "name": "a\tb waitfor", "evidence": "contains the SQL word 'WAITFOR'", "note": "a tab is white space, not a flagged control character" },
  { "name": "first and last name", "evidence": null, "note": "everyday SQL words aren't in the list" },
  { "name": "last update", "evidence": null },
  { "name": "my column", "evidence": null },
  { "name": "1abc", "evidence": null },
  { "name": "DROP", "evidence": null, "note": "words count only in a name with white space" },
  { "name": "pg_sleep", "evidence": null },
  { "name": "abc$def", "evidence": null, "note": "the core check has no $; MongoDB's provider adds it" },
  { "name": "a#b", "evidence": null, "note": "the core check has no #; DynamoDB's provider adds it" },
  { "name": "", "evidence": null }
]