core(third-party-summary): check main domain against all third party domains

[mikedijkstra]

Summary
This PR fixes a bug where if you run an audit on a domain that's in third-party-web it records all scripts from that domain as a third party.

For example running an audit against the url my-pr-3.netlify.com will record all scripts retrieved from my-pr-3.netlify.com against the third party Netlify, even though they're first party scripts.

The change intended to fix this issue is to compare the domain of the main resource url against all request urls and skip the ones that match.

[googlebot]

Thanks for your pull request. It looks like this may be your first contribution to a Google open source project (if not, look below for help). Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

📝 Please visit https://cla.developers.google.com/ to sign.

Once you've signed (or fixed any issues), please reply here with @googlebot I signed it! and we'll verify it.

---

What to do if you already signed the CLA

Individual signers

• It's possible we don't have your GitHub username or you're using a different email address on your commit. Check your existing CLA data and verify that your email is set on your git commits.

Corporate signers

• Your company has a Point of Contact who decides which employees are authorized to participate. Ask your POC to be added to the group of authorized contributors. If you don't know who your Point of Contact is, direct the Google project maintainer to go/cla#troubleshoot (Public version).
• The email used to register you as an authorized contributor must be the email used for the Git commit. Check your existing CLA data and verify that your email is set on your git commits.
• The email used to register you as an authorized contributor must also be attached to your GitHub account.

ℹ️ Googlers: Go here for more info.

[mikedijkstra]

@googlebot I signed it!

[googlebot]

CLAs look good, thanks!

ℹ️ Googlers: Go here for more info.

[patrickhulce]

thanks very much @micdijkstra! excited to get this in :)

[mikedijkstra]

@patrickhulce This has been updated to reflect your requested changes.

I didn't want to add the mainResource to getSummaryByEntity so now we're filtering the entries before they're mapped into results. The domain comparison is a little tricky as we're now comparing wildcard domains with urls. I'm not across what's available so please let me know if there's a better way!

[patrickhulce]

LGTM % test change

[patrickhulce]

hang on you'll need to add URL to the requiredArtifacts to fix the test issue too :)

[mikedijkstra]

@patrickhulce I've updated the test and included the comment.

hang on you'll need to add URL to the requiredArtifacts to fix the test issue too :)

I was going to ask about that test, thanks for the tip! Looks like it's green ✅

[patrickhulce]

LGTM, thanks so much @micdijkstra!