Expansion of multiple variables in fields

[tsmolka]

I have noticed that field mappings are currently limited to only single variable for expansion. I would like to propose making this more generic and expand all variables.

[wesyoung]

neato, mind writing a simple test for this? help explain it a bit, make sure it doesnt' break if we make other changes?

eg: https://github.com/csirtgadgets/massive-octo-spice/blob/develop/src/t/20-openbl.t

maybe put the example rule in src/rules/example ?

[tsmolka]

Well, I have slightly rewritten the code so that variables are expanded in nested structures as well (e.g additional_data). I quickly tested the change and it seems OK.

[wesyoung]

rock on, ty!