This is a potential symbol-table leak if someone submits a malicious Cache-Control header. I would ensure that all of the symbols you parse are existing symbols, if possible.