I am looking for example to block XSS (SQL injections).
well, something like this:
frontend f_main
timeout http-request 10s
option http-buffer-request
http-request deny if { req.body -m reg "(SELECT * FROM|; SELECT)" }
Update the regex list to match your SQLinjections attack.