Today I read The danger of target=_blank and opener which has some good pointers about how to open links in a new window, e.g. <a href="https://an.evil.site" target="_blank" rel="noopener noreferrer nofollow">An evil site</a>