improve comments
fix the bug when yy_sec_waf is off