[Security] fix typo