Not entirely sure under what scenario a malicious website could get end up in here, but if the goal is to guard against that, the regexp should be something like `/(^|\.)github\.com$/` (so a site like "myfakegithub.com" wouldn't match).