Currently it seems the Firewall is only capable of content blocking via domains. This is hugely restrictive.
It would be nice to have a proper URL blocker that supports at least these things listed:
Multiple wildcards (the asterisk in particular) such as www.google./searchsafe=off
Allow subscribing to multiple blocklists, such as the ones available from http://adblockplus.org/en/subscriptions/ as well as separate, self-defined blocklists, where you would insert your own rules.
Allow redirection, for example, redirect http://* to https://*
This feature would provide system-wide adblocking and optionally, system-wide malwaredomains blocking, providing increased security, as it should be capable of blocking content in ALL web browsers on the system without the use of a software proxy, which requires manual modification of each browser before the browser would follow the rules.