Programmatic Click to Open Same-Origin URLs

In API version 68.0 and later, when Lightning Web Security (LWS) for Aura is enabled, using window.open() with _blank to open same-origin Salesforce URLs in a new tab results in a LockerSecurityError. For example, window.open(vfPdfUrl, '_blank', 'noopener,noreferrer') doesn’t work starting in API version 68.0. Use this recommended programmatic anchor click for same-origin downloads and navigation.