Mark Nottingham

gzip compression failure

2

when gzip decompression fails: - conneg check shouldn't show savings, because we don't know if it can succeed or not. - show body shouldn't work, because we can't

- [ ] when client connection is closed - [ ] when timeout happens

In `cache.py:checkCaching`.

In `fetch.py:run_continue()`, encoding errors in `req_hdrs` are `replaced. Should we complain?

`fetch.py:set_request()` doesn't have any encoding for request body; should it? Note that req_body is `bytes`, so this could be done beforehand.

`set_cookie.py`

Upper-case cc directives

2

warn?

Browser security view

1

It would be nice if there were a separate section for browser security (on par with general / caching / validation). See: http://www.barracudalabs.com/wordpress/index.php/2011/07/21/google-gets-a-1-for-browser-security-3/ Candidates: X-XSS-Protection X-Frame-Options X-Content-Type-Options secure cookie flag...