Security advisory: Breach and Django
Switch off all GZIP..? That feels very extreme, I'm sure there are better workarounds than that one.EDIT: The following workarounds should be very simple to implement and seem like more viable alternatives for production?  Length hiding (by adding random amount of bytes 
    to the responses)
  Rate-limiting the requests

Mitigations 6 and 7 taken from http://breachattack.com/