Am I mistaken or does this require the user to allow pop-ups?
Default configuration for most browsers is to allow popups if it was initiated by a user action.