Fix missing permission on new embeds making them unclickable (#32135)

public/embed.js

@@ -81,7 +81,7 @@ const allowedPrefixes = (document.currentScript && document.currentScript.tagNam
       embeds.set(id, iframe);
 
       iframe.allow = 'fullscreen';
-      iframe.sandbox = 'allow-scripts allow-same-origin';
+      iframe.sandbox = 'allow-scripts allow-same-origin allow-popups';
       iframe.style.border = 0;
       iframe.style.overflow = 'hidden';
       iframe.style.display = 'block';
@@ -112,7 +112,7 @@ const allowedPrefixes = (document.currentScript && document.currentScript.tagNam
       iframe.width = container.clientWidth;
       iframe.height = 0;
       iframe.allow = 'fullscreen';
-      iframe.sandbox = 'allow-scripts allow-same-origin';
+      iframe.sandbox = 'allow-scripts allow-same-origin allow-popups';
       iframe.style.border = 0;
       iframe.style.overflow = 'hidden';
       iframe.style.display = 'block';