urls: Break out of the BSA's frame for all external URLs

All external urls need target="_blank" to break out of our frame.