.htaccess

ErrorDocument 404 /404.html

<IfModule mod_headers.c>
    Header set Content-Security-Policy "frame-src 'self' https://www.google.com https://app.netlify.com"
</IfModule>