Defender tweaks blocks access in subsites

I am getting multiple console errors saying:
"not allowed by access-control-allow-origin"
in subsites that are mapped to a custom domain name.
Please help me to fix this via applying appropriate Defender security tweaks