diff --git a/docs/tutorial/security.md b/docs/tutorial/security.md
index 36ba2dcab318..70c455236e0b 100644
--- a/docs/tutorial/security.md
+++ b/docs/tutorial/security.md
@@ -597,7 +597,7 @@ app.on('web-contents-created', (event, contents) => {
   contents.on('will-navigate', (event, navigationUrl) => {
     const parsedUrl = new URL(navigationUrl)
 
-    if (url.hostname !== 'my-own-server.com') {
+    if (parsedUrl.hostname !== 'my-own-server.com') {
       event.preventDefault()
     }
   })
@@ -648,5 +648,5 @@ app.on('web-contents-created', (event, contents) => {
 [browser-view]: ../api/browser-view.md
 [webview-tag]: ../api/webview-tag.md
 [web-contents]: ../api/web-contents.md
-[new-window]: ../api/web-contents#event-new-window
-[will-navigate]: ../api/web-contents#event-will-navigate
+[new-window]: ../api/web-contents.md#event-new-window
+[will-navigate]: ../api/web-contents.md#event-will-navigate