replace lower() contains by wildcard "*...*"

[bigb06]

For example
lower(http.user_agent) contains "voluumdsp"
will become
http.user_agent wildcard "*voluumdsp*"

This tips can reduce WAF rule length because rule length is limited to 4K.

[sefinek]

Hi, thanks for the tip! b7233cd