Don't add the user's domain to invitee domains unless it's on the whitelist

plugins/DomainWhitelist/DomainWhitelistPlugin.php

@@ -231,8 +231,9 @@ class DomainWhitelistPlugin extends Plugin
                 )
             );
 
+            if (in_array($userDomain, $whitelist)) {
                 array_unshift($orderedWhitelist, $userDomain);
-
+            }
             return $orderedWhitelist;
         }