Hello world!

go to vulnerable page and notice this tab will change or go to vulnerable page in a safe way

When the target is not set, there is no problem. As you can see here.

The trick is to add rel="noopener" to the link.