Safari actually handles this pretty well. By default you will be prompted per-site which domain you want the extension to run on, or you can set your allow or d

Safari actually handles this pretty well. By default you will be prompted per-site which domain you want the extension to run on, or you can set your allow or deny all except your whitelist.