fix: Potential opener manipulation (#10318)

<!--
Before opening a pull request, please read the [contributing
guidelines](https://github.com/pancakeswap/pancake-frontend/blob/develop/CONTRIBUTING.md)
first
-->


<!-- start pr-codex -->

---

## PR-Codex overview
This PR adds a new security header `Cross-Origin-Opener-Policy` with the
value `same-origin` in the `withWebSecurityHeaders.ts` file.

### Detailed summary
- Added a new security header `Cross-Origin-Opener-Policy` with value
`same-origin`

> ✨ Ask PR-Codex anything about this PR by commenting with `/codex {your
question}`

<!-- end pr-codex -->

packages/next-config/withWebSecurityHeaders.ts

@@ -33,6 +33,10 @@ export function withWebSecurityHeaders(config: NextConfig): NextConfig {
             key: 'Referrer-Policy',
             value: 'strict-origin-when-cross-origin',
           },
+          {
+            key: 'Cross-Origin-Opener-Policy',
+            value: 'same-origin',
+          },
           // createCSP(),
         ],
       },