seeing an error of the variety
Blocked opening '<my_url>' in a new window because the request was made in a
sandboxed frame whose 'allow-popups' permission is not set.
when trying to open a page in a new tab via a button inside the app
it seems as though these sandbox permissions are needed here