I think so far the best setup Ive seen of this for browser restriction for a session is with running the browser in firejail. https://github.com/netblue30/firejail