There might already be a setting for this, but browsers should not create new windows or tabs without explicit permission from the user every single time. If there is a setting, it should be the default.