It usually doesn't actually cost that much to fix SQL injections and they're really easy to find. I've prioritised identifying and fixing these problems whenev

It usually doesn't actually cost that much to fix SQL injections and they're really easy to find. I've prioritised identifying and fixing these problems whenever I'm leading teams. It's an easy sell to management (spend a sprint to greatly lower risk) and a good training exercise for teams.