As Daniel and Michael have identified while in the comments, when working with focus on _blank pointing to an untrusted Site, you should, On top of that, established rel="noopener". This prevents the opening web page to mess with the opener by means of JavaScript. See this submit for more information. https://stephenxujcs.wikigop.com/1548817/details_fiction_and_best_cars_under_10_lakhs