Use `hash-value` instead of `base64-value`

for consistency with `nonce-value`.
Merge pull request #40 from jyasskin/patch-1

Use `hash-value` instead of `base64-value`
REFERRER: s/"none"/none/g
REFERRER: Move the unique origin check above walking the srcdoc chain.
Regenerate HTML.