add_action('wp_headers', function($headers) {
    $headers['Content-Security-Policy'] = "frame-src 'self' https://demo.erps.softkitpe.com; frame-ancestors 'self' https://demo.erps.softkitpe.com;";
    return $headers;
});