SQL injection protection is provided by XML Firewall protection parameters in DataPower. While unintuitive, the XML Firewall's threat protection capabilities include SQL injection detection alongside other injection attacks. Option B (Web Application Firewall) provides broader HTTP-level protection but XML threat protection specifically handles SQL injection in the XML context.