Clickjacking and CSRF protection

Hi, I need to set Content-Security-Policy: frame-ancestors to “none” and also to modify Cookies Settings to SameSite=strict so I can disable Cross-Site Requests.

How can I do that?