Update vulnpage-iframe.php

Update csp switch statement so that csp header is transfered to secondary request