I don't remember the specific restrictions, but I remember that you could only click links that were on the allowed site.

So if you tried to go to example.com, you would be redirected to bank.com. But if a link on bank.com got you to example.com, you could visit it that way.

Obviously address bars are one of the restricted things. I feel like there might have been others, but I don't recall the specifics.