added sql-injection item
documentation for sec-lib