comment_list.go: do not leak state if not mod

api/comment_list.go

@@ -71,6 +71,10 @@ func commentList(commenterHex string, domain string, path string, includeUnappro
 			}
 		}
 
+		if !includeUnapproved {
+			c.State = ""
+		}
+
 		comments = append(comments, c)
 
 		if _, ok := commenters[c.CommenterHex]; !ok {