Comment 6 for bug 1559239

Thanks for the fix, Jeff; the testing, Jason; and the clear explanation, Galen. I can confirm that window.opener is already null from the Web client, and that Jeff's commit fixes the issue for the OPAC. I've pushed an additional signoff to the security repo in a branch called user/sandbergja/lp1559239-target-blank-noopener-signoff