Setting up Iframe protection

For an embedded app Shopify now requre the Content Security Policy frame-ancestors directive to avoid clickjacking attacks.
See: https://shopify.dev/apps/store/security/iframe-protection
Please can you help me implement this in the code, my app was rejected because of this.