fix: Coinbase wallet popup (#10996)

<!--
Before opening a pull request, please read the [contributing
guidelines](https://github.com/pancakeswap/pancake-frontend/blob/develop/CONTRIBUTING.md)
first
-->

<!-- start pr-codex -->

---

## PR-Codex overview
This PR focuses on enhancing security by adding `noopener noreferrer` to
`window.open` calls and introducing a new header for cross-origin
policies in the `next.config.mjs` file.

### Detailed summary
- Added a new header for `Cross-Origin-Opener-Policy` in
`next.config.mjs`.
- Updated `window.open` calls in:
  - `WalletModal.tsx` to include `noopener noreferrer`.
  - `ExternalCurrencyLink/index.tsx` to include `noopener noreferrer`.
- `StakeActions.tsx` for both `decreaseLink` and `increaseLink` to
include `noopener noreferrer`.

> ✨ Ask PR-Codex anything about this PR by commenting with `/codex {your
question}`

<!-- end pr-codex -->

apps/web/next.config.mjs

@@ -107,6 +107,15 @@ const config = {
   },
   async headers() {
     return [
+      {
+        source: '/:path*',
+        headers: [
+          {
+            key: 'Cross-Origin-Opener-Policy',
+            value: 'same-origin-allow-popups',
+          },
+        ],
+      },
       {
         source: '/favicon.ico',
         headers: [

apps/web/src/views/universalFarms/components/PositionActions/StakeActions.tsx

@@ -82,10 +82,10 @@ export const V3ModifyStakeActions: React.FC<V3LiquidityActionsProps> = ({
   decreaseLink,
 }) => {
   const onDecrease = useCallback(() => {
-    window.open(decreaseLink, '_blank', 'noopener')
+    window.open(decreaseLink, '_blank', 'noopener noreferrer')
   }, [decreaseLink])
   const onIncrease = useCallback(() => {
-    window.open(increaseLink, '_blank', 'noopener')
+    window.open(increaseLink, '_blank', 'noopener noreferrer')
   }, [increaseLink])
 
   return <ModifyStakeActions decreaseDisabled={decreaseDisabled} onIncrease={onIncrease} onDecrease={onDecrease} />

packages/ui-wallets/src/WalletModal.tsx

@@ -163,7 +163,7 @@ function MobileModal<T>({
           onClick={(wallet) => {
             connectWallet(wallet)
             if (wallet.deepLink && wallet.installed === false) {
-              window.open(wallet.deepLink)
+              window.open(wallet.deepLink, '_blank', 'noopener noreferrer')
             }
           }}
         />

packages/widgets-internal/components/ExternalCurrencyLink/index.tsx

@@ -55,7 +55,7 @@ type Props = {
 
 export function ExternalCurrencyLink({ currencyLogo, title, desc, href, ...props }: Props) {
   const onLinkClick = useCallback(() => {
-    window.open(href, "_blank");
+    window.open(href, "_blank", "noopener noreferrer");
   }, [href]);
 
   return (