A patch release. Three bug fixes, two of them from reports on 3.44.0.
YouTube embeds were showing "Error 153"
Since 3.41.0 Haven has told browsers not to say which page a request came from when they load something on another site. That was the fix for X refusing to play its videos, since X rejects requests that identify the hosting page.
YouTube wants the exact opposite. With nothing identifying the page it is embedded in, its player refuses to start and shows "Error 153 - Video player configuration error" instead of the video.
Both embeds Haven builds, the one for a YouTube link in chat and the Listen Together player, now pass along just the server address. No page path, no invite code. That is enough for YouTube, and it does not undo the reason the setting was changed in the first place: invite links live in the part of the address that still is not sent.
Reported by @bolverk.
Thread replies were skipping the message checks
A reply posted in a thread went through a different code path that never picked up the checks the normal one has. So a thread reply ignored the link policy, posted fine while the sender was muted, ignored a channel being set to read-only, and had no length limit at all.
All four now apply. Found by @birdcrazy.
Popped-out DMs were not showing link warnings
The DM link check added in 3.44.0 worked in full-screen DMs but not in popped-out ones. The code deciding whether a view was a DM looked for a marker that is not actually in the page, so a DM popped out over a normal channel was never treated as a DM and its links stayed clickable.
Also found by @birdcrazy.
Restart your server to pick this up. Nothing to configure.