diff --git a/pages/sessions/cookies/astro.md b/pages/sessions/cookies/astro.md
index ff9d9865b..5bbf8a5dd 100644
--- a/pages/sessions/cookies/astro.md
+++ b/pages/sessions/cookies/astro.md
@@ -15,7 +15,7 @@ CSRF protection is a must when using cookies. From Astro v5.0, basic CSRF protec
 export default defineConfig({
 	output: "server",
 	security: {
-		checkOrigin: false
+		checkOrigin: true
 	}
 });
 ```