docs/daprdocs/staticwebapp.config.json

{
    "globalHeaders": {
        "X-Frame-Options": "DENY"
    },
    "responseOverrides": {
        "404": {
            "rewrite": "/404.html",
            "statusCode": 404
        }
    }
}