It is because of sandboxed iframes are blocking this behavior
When clicking hyperlink:
Blocked opening url in a new window because the request was made in a sandboxed frame whose 'allow-popups' permission is not set.
When embedding in iframe:
Refused to display url in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.