Update CSP example

[guillaume-fr]

• 128bit nonce
• content-security-policy and content-security-policy-report-only
• multiple nonces in CSP
• nonce in any CSP directive
• response content transformation pattern
• forwarding non-html content
• serve as-is when CSP headers are missing
• processing response with any status