Certain events, such as clicking or pressing a key, can spawn pop-ups regardless of if the pop-up blocker is on. This is intentional, so that Firefox doesn't block pop-ups that websites need to work.
The general rule is that popup blockers will engage if
window.openor similar is invoked from javascript that is not invoked by direct user action.