Update vulnpage-iframe.php.html

Update csp switch statement so that csp header is transfered to secondary request