packages: remove onclick handler

The onclick handler is a CSP violator since no JavaScript is allowed to
be executed without a nounce. The inline script has been replaced with a
target="_blank".

Closes: #202

Signed-off-by: Jelle van der Waa <jelle@vdwaa.nl>

templates/packages/package_details.html

@@ -34,8 +34,8 @@ <h4>Package Actions</h4>
                 <li><a href="flag/" title="Flag {{ pkg.pkgname }} as out-of-date">Flag Package Out-of-Date</a>
                 <a href="/packages/flaghelp/"
                     title="Get help on package flagging"
-                    onclick="return !window.open('/packages/flaghelp/','FlagHelp',
-                    'height=350,width=450,location=no,scrollbars=yes,menubars=no,toolbars=no,resizable=no');">(?)</a></li>
+		    target="_blank"
+		    >(?)</a></li>
                 {% endif %}
                 <li><a href="download/" rel="nofollow" title="Download {{ pkg.pkgname }} from mirror">Download From Mirror</a></li>
             </ul>