AJAX requests to this site from another (those containing an Origin header) will be allowed for any domain in your multisite setup, no configuration required