For sandboxing webapps you will need to install the additional ports:
wasi-libc
wasi-compiler-rt
wasi-libc++

If you compile firefox frequently, consider installing ccache and sccache,
so that later updates can use the artifacts left over from previous builds.