> What it is is a domain-by-domain whitelister.

Domain whitelisting is useless in situations like this, as sites like Github are likely to be in a frequent visitor's trusted sites list.