This figure illustrates how a first-order injection warning is flagged in the code editor.