Stuart Interview Question

How would you protect a REST API against potential SQL Injections?