1 files changed, 32 insertions, 0 deletions
diff --git a/lib/banzai/filter/reference_redactor_filter.rb b/lib/banzai/filter/reference_redactor_filter.rb
new file mode 100644
index 00000000000..485d3fd5fc7
--- /dev/null
+++ b/lib/banzai/filter/reference_redactor_filter.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+module Banzai
+  module Filter
+    # HTML filter that removes references to records that the current user does
+    # not have permission to view.
+    #
+    # Expected to be run in its own post-processing pipeline.
+    #
+    class ReferenceRedactorFilter < HTML::Pipeline::Filter
+      def call
+        unless context[:skip_redaction]
+          context = RenderContext.new(project, current_user)
+
+          ReferenceRedactor.new(context).redact([doc])
+        end
+
+        doc
+      end
+
+      private
+
+      def current_user
+        context[:current_user]
+      end
+
+      def project
+        context[:project]
+      end
+    end
+  end
+end