SI: Add details on an integrity cache-enabled CSP bypass.

Noted initially by Ben Towes on public-webappsec@ (no URL, as Ben
wasn't a member of the list when he posted).