reapply window.open() clamping

In alpha we seem to have lost the 10px clamping for new windows (which are opened in a new tab: see legacy/trac#9881 (moved) )

Pic to follow: example of a user resizing the browser for more real estate: which we want to encourage for uptake and for the letterboxing buckets to be less FP'able (I assume).

Would be good to upstream it