Where to set Content-Security-Policy: frame-ancestors in the embedded app?

How and where can I add frame-ancestors in the Shopify laravel embedded app?