You could also use the Content Advisor and password protect. Only allow those entries that are on your list.

Anyone that is an Admin though and knows what they're doing can stop that.

As Richard says - you need something that has external control between the user PC and the Internet to really block stuff properly.

Even without the address bar you can also do CTRL-O or CTRL-L to open a window to type in an address.