The current usage as described by "firefox --help" is
Usage: firefox [ options ... ] [URL]
i.e. the URL is passed as an argument. However, this is not secure as other users of the machine can see the URL, e.g. with the "ps" utility. Instead, there should be an option tell firefox to read the URL on the standard input (for instance, it can be passed via a pipe).