WAF rules for XSS attacks and SQL injections

Hey! Can you guys give me some examples of WAF rules that you set up for XSS and SQL injections? Screenshots would be

Thanks for help!