receiving a request, the request including a specification of one or more forms of transforming response data sent by a server in response to the request;

modifying the request to remove at least one of the forms of transforming from the specification;

sending the modified request to the server;

inspecting response data from the server for malicious content if the response data is not transformed or is transformed using a form of transforming specified in the modified request; and

taking one or more predetermined actions if the response data is transformed using a form of encoding that is not specified in the modified request.