dont leak issuer if !ban.showUser in new json of bans for ban/appeal modal

lib/middleware/permission/bancheck.js

@@ -24,8 +24,9 @@ module.exports = async (req, res, next) => {
 		await Bans.markSeen(unseenBans); //mark bans as seen
 		bans.forEach(ban => {
 			ban.ip.raw = null;
-			ban.seen = true
-		}); //mark seen as true in memory for user viewed ban page
+			ban.issuer = ban.showUser === true ? ban.issuer : null;
+			ban.seen = true;
+		});
 		return dynamicResponse(req, res, 403, 'ban', {
 			bans,
 		});