Index: community/cms/engine/src/main/java/org/hippoecm/frontend/Main.java
IDEA additional info:
Subsystem: com.intellij.openapi.diff.impl.patch.CharsetEP
<+>UTF-8
===================================================================
diff --git a/community/cms/engine/src/main/java/org/hippoecm/frontend/Main.java b/community/cms/engine/src/main/java/org/hippoecm/frontend/Main.java
--- a/community/cms/engine/src/main/java/org/hippoecm/frontend/Main.java	(revision 6b374569cfe8d0af02d349c034e1ad360722844b)
+++ b/community/cms/engine/src/main/java/org/hippoecm/frontend/Main.java	(date 1653050644030)
@@ -34,6 +34,7 @@
 import org.apache.wicket.Session;
 import org.apache.wicket.ajax.AjaxRequestTarget;
 import org.apache.wicket.application.IClassResolver;
+import org.apache.wicket.coop.CrossOriginOpenerPolicyConfiguration;
 import org.apache.wicket.core.request.handler.PageProvider;
 import org.apache.wicket.core.request.handler.RenderPageRequestHandler;
 import org.apache.wicket.core.request.handler.RenderPageRequestHandler.RedirectPolicy;
@@ -779,6 +780,8 @@
     }
 
     private void initCMS() {
+        getSecuritySettings().setCrossOriginOpenerPolicyConfiguration(CrossOriginOpenerPolicyConfiguration.CoopMode.SAME_ORIGIN_ALLOW_POPUPS);
+
         HippoServiceRegistry.addTracker(new ProxiedServiceTracker<>() {
             @Override
             public void serviceRegistered(final ProxiedServiceHolder<ApplicationSettings> serviceHolder) {