SQL Injection Block

I am looking for example to block XSS (SQL injections).

well, something like this:

frontend f_main
   timeout http-request 10s
   option http-buffer-request
   http-request deny if { req.body -m reg "(SELECT * FROM|; SELECT)" }

Update the regex list to match your SQLinjections attack.