I don't know why you can't whitelist it, not sure why it isn't working for you (or working completely for me).
I set the hXXp://ocf.org/* in the web shield exclusions, and it does stop the alert as such, but now I get a different one (see attached) with the only option being 'Get me out of here.'
So it is sort of half working.