How can I make this plugin work?

[13233032535]

I have successfully installed this plugin,but I had some problems starting the plugin.

I have enabled this plug-in on my API interface, and my API interface has also added the request parameters of SQL injection, but this plug-in has not intercepted it. I can still access the API.

My API request is as follows:
http://localhost:8000/a/a/b?aaa=' or '1'='1

My Kong version is:
kong-1.4.2

Edit Kong-injection params as follows:
sqli YES
xss YES

sqli mode drop
xss mode drop

I hope you can give me some guidance, looking forward to your reply, thank you

[13233032535]

@ror6ax