add 'nwdisable' and fix security origin