diff --git a/docs/tutorial/security.md b/docs/tutorial/security.md
index 4a3300ee7f..94ca13c9ed 100644
--- a/docs/tutorial/security.md
+++ b/docs/tutorial/security.md
@@ -278,7 +278,8 @@ session
       callback(true)
     }
 
-    if (!url.startsWith('https://my-website.com')) {
+    // Verify URL
+    if (!url.startsWith('https://my-website.com/')) {
       // Denies the permissions request
       return callback(false)
     }