i found a use full regular expression vaildating input string, you can use it to filter sql injection attacks while taking input for username, title ect.
^[a-zA-Z]+(([.- ][a-zA-Z0-9 ])?[a-zA-Z0-9]*)*$
A practitioner’s musings on Dynamics 365 Finance and Operations