application/sql

SQL as a payload, registered mostly so file servers have something honest to say about .sql dumps and migration scripts instead of text/plain or octet-stream. It is rare on the wire — databases speak their own binary protocols, and APIs that accept queries usually wrap them in JSON — so you mainly meet it on downloads. Treat any inbound SQL body as code rather than data; an endpoint that executes what it receives under this type is an injection surface by definition.

Defined by RFC 6922 · IANA registration. Registry facts from the IANA media-types registry via mime-db.