Imho there is Pure and Unpure WSGI middleware, the former can be used or removed with zero change to the application, this works for things like: - profiling -

Imho there is Pure and Unpure WSGI middleware, the former can be used or removed with zero change to the application, this works for things like: - profiling - caching - csrf protection This is what I think wsgi middleware should be.