I think what you’re looking for is known as kiosk software. Basically a locked down browser that has limited or zero user interaction possible.

Or by deliberately breaking DNS on that host. Add the entries you want to allow to /etc/hosts and not supply any upstream DNS servers. (Change of needing maintenance if those sites change IP)