initial version of a command line invocation

[pes10k]

usage: check.js [-h] [-v] --url URL --context-url CONTEXT_URL --rule-files
                [RULE_FILES ...] [--verbose]
                (--type {beacon,csp_report,document,font,image,media,object,ping,script,stylesheet,sub_frame,websocket,xhr,other,speculative,web_manifest,xbl,xml_dtd,xslt} | --chromium-type {Attribution resource,Audio,CSS resource,CSS stylesheet,Dictionary,Document,Fetch,Font,Icon,Image,Internal resource,Link element resource,Link prefetch resource,Manifest,Mock,Other resource,Processing instruction,Script,SpeculationRule,SVG document,SVG Use element resource,Text track,Track,User Agent CSS resource,Video,XML resource,XMLHttpRequest,XSL stylesheet})

Check whether a URL would be blocked by given filter list rules

optional arguments:
  -h, --help            show this help message and exit
  -v, --version         show program's version number and exit
  --url URL             The full URL to check against the provided filter
                        lists. (default: undefined)
  --context-url CONTEXT_URL
                        The security context the request occurred in, as a
                        full URL (default: undefined)
  --rule-files [RULE_FILES ...]
                        One or more paths to files of filter list rules to
                        check the request against (default: undefined)
  --verbose             Print information about what rule(s) the request
                        matched. (default: false)
  --type {beacon,csp_report,document,font,image,media,object,ping,script,stylesheet,sub_frame,websocket,xhr,other,speculative,web_manifest,xbl,xml_dtd,xslt}
                        The type of the request, using the types defined by
                        filter list projects (default: undefined)
  --chromium-type {Attribution resource,Audio,CSS resource,CSS stylesheet,Dictionary,Document,Fetch,Font,Icon,Image,Internal resource,Link element resource,Link prefetch resource,Manifest,Mock,Other resource,Processing instruction,Script,SpeculationRule,SVG document,SVG Use element resource,Text track,Track,User Agent CSS resource,Video,XML resource,XMLHttpRequest,XSL stylesheet}
                        The type of the request, using the types defined by
                        chromium (default: undefined)

[github-actions]

The security team is monitoring all repositories for certain keywords. This PR includes the word(s) "csp" and so security team members have been added as reviewers to take a look.

No need to request a full security review at this stage, the security team will take a look shortly and either clear the label or request more information/changes.

Notifications have already been sent, but if this is blocking your merge feel free to reach out directly to the security team on Slack so that we can expedite this check.

[github-actions]

Rust Benchmark

Benchmark suite	Current: 6808ba0	Previous: d56be21	Ratio
rule-match-browserlike/brave-list	1745283947 ns/iter (± 20249004)	1727033355 ns/iter (± 11920489)	1.01
rule-match-first-request/brave-list	1006105 ns/iter (± 19039)	1005963 ns/iter (± 12764)	1.00
blocker_new/brave-list	228886810 ns/iter (± 7299621)	220140757 ns/iter (± 5159081)	1.04
memory-usage/brave-list-initial	41408849 ns/iter (± 3)	41408849 ns/iter (± 3)	1
memory-usage/brave-list-after-1000-requests	44004875 ns/iter (± 3)	44004875 ns/iter (± 3)	1

This comment was automatically generated by workflow using github-action-benchmark.

[pes10k]

You can invoke like this:

npm run check -- \
  --url <REQUEST URL> \
  --type <REQUEST TYPE> \
  --context-url <SECURITY CONTEXT URL> \
  --rule-files <PATH> <PATH> ...;

[pes10k]

The security team is monitoring all repositories for certain keywords. This PR includes the word(s) "csp" and so security team members have been added as reviewers to take a look. No need to request a full security review at this stage, the security team will take a look shortly and either clear the label or request more information/changes. Notifications have already been sent, but if this is blocking your merge feel free to reach out directly to the security team on Slack so that we can expedite this check.

FWIW, the "csp" reference added here is just because its a request type that filter list rules can target (or exclude)