fix: xss possibilities through window.open #1001

Job	Run time
extension-build	7m 3s
desktop-build (ubuntu-latest, make:intel, x64, /apps/desktop/out/make)	6m 2s
twa-build	3m 40s
desktop-build (ubuntu-latest, make:arm, arm64, /apps/desktop/out/make)	5m 35s
desktop-build (windows-latest, make:intel, x64, /apps/desktop/out/make/squirrel.windows/x64/*Setu...	9m 38s
desktop-build (macos-13, make:intel, x64, /apps/desktop/out/make)	10m 23s
desktop-build (macos-13, make:arm, arm, /apps/desktop/out/make)	13m 8s
desktop-build (macos-13, make:universal, universal, /apps/desktop/out/make)	11m 40s
web-build / web-build	3m 37s
ipad-build / ipad-build	1s
swap-widget-build / Swap Widget	3m 38s
web-tests / playwright-tests	20m 13s
	1h 34m 38s

Provide feedback