App must set security headers to protect against clickjacking.

[Cargologi]

Hello everyone,

Im getting this rejected app message .

İ set up two page in app   base App URL and  redirectURL 

then i put this code both of pages.

header("Content-Security-Policy: frame-ancestors https://".$ad_shop_name." https://admin.shopify.com;");

but still my app is rejecting everytime and im getting everytime same email so i cant find where i did mistake  ...

Anyone can help me please

Best Regards...