In the Plugin Framework, plugins run inside a sandboxed <iframe>
for security. By default, the sandbox does not include the allow-popups
permission.
Some useful links:
https://jackhenry.dev/open-api-docs/plugins/architecture/userinterface/
https://jackhenry.dev/open-api-docs/plugins/guides/designinganddevelopingplugins/
https://banno.github.io/open-api-docs/plugins/architecture/restrictions/#opening-new-windows
If a link is working as expected in another plugin, opening a new tab, they are likely using the Plugin Bridge.