FIX: Don't include hidden posts in embedded comments

app/controllers/embed_controller.rb

@@ -22,7 +22,8 @@ class EmbedController < ApplicationController
                                   current_user,
                                   limit: SiteSetting.embed_post_limit,
                                   exclude_first: true,
-                                  exclude_deleted_users: true)
+                                  exclude_deleted_users: true,
+                                  exclude_hidden: true)
 
       @second_post_url = "#{@topic_view.topic.url}/2" if @topic_view
       @posts_left = 0

lib/topic_view.rb

@@ -387,6 +387,7 @@ class TopicView
     result = filter_post_types(@topic.posts)
     result = result.with_deleted if @guardian.can_see_deleted_posts?
     result = @topic.posts.where("user_id IS NOT NULL") if @exclude_deleted_users
+    result = @topic.posts.where(hidden: false) if @exclude_hidden
     result
   end