Disabling only waf fucntion with exhausting account-security, leads to reach app function without any filter.Triggering exception in waf function, make pricing only account-security without propagation to app function.Same solution is available, in version 1.0 challenge.