Safari has protection against cross-site navigation enabled by default. The issue here is cross-site window open.