They have exactly that. When you turn on restrictions to lets say only allow google.com only *.google.com will work (ex. mail.google.com/maps.google.com/m.google.com etc) any app with a built in browser, should it be Chrome.app or any other app will only be able to access the above sites.
P.S. idk if i’m allowed to upload links here but I took a few screenshots that I can show you.