HTTP header modification

[kevin_lacinski]

Hi

Need to update http headers with some items.  Not sure how/where to do effectively.  Anyone able to assist? I need to add some items and update others like:

Strict-Transport-Security: max-age=31536000; include Subdomains;
Content-Security-Policy: default-src self'; script-src 'self' 'unsafe-inline'
X-Frame-Options: DENY

Thanks!