The security API (OWASP ESAPI) contains built-in codecs for both Oracle (OracleCodec) and MySQL (MySQLCodec) to prevent SQL injection attacks. While other databases can also be supported via custom implementations, these two databases are explicitly covered by default SQL codecs provided in the core library.