Most modern browsers on Mac have built-in blockers enabled by default to prevent intrusive ads and malicious redirects.
She checked. He was right. Legitimate OAuth windows were being caught in the crossfire because they relied on cross-origin token inheritance.