window.open方法打开网页没有带refer参数无法通过权限验证可通过这种方式实现open的效果

function toCreateOrderPage() {
  var url = "toCreateOrderPage.action?tktNo=${request.tktNo}";

//打开一个空白窗口，第二个参数可以是iframe名称

  var win = window.open("","right");  
  var link = document.getElementById("c_order");
  link.target = "right";  
  link.href = url;  
  link.click();
  win.focus();
 }

<a id="c_order" HREF="javascript:void(0)" style="display:none;"></a>
<input name="" value="打开窗口" type="button" class="sub2" onclick="toCreateOrderPage()" />