receiving a client request for data from a server, the request including a specification of one or more forms of transforming response data sent by the server in response to the request;

modifying the request in a manner designed to prevent the server from transforming the response data in accordance with the specification;

sending the modified request to the server;

receiving response data from the server;

if the response data is not transformed in accordance with the specification, inspecting the response data for malicious content; and

if the response data is transformed in accordance with the specification, taking one or more predetermined actions.