diff --git a/www/bounce/main.js b/www/bounce/main.js
index d2687308d..5b122f074 100644
--- a/www/bounce/main.js
+++ b/www/bounce/main.js
@@ -1,5 +1,5 @@
 define(['/api/config'], function (ApiConfig) {
-    if (ApiConfig.httpSafeOrigin === window.location.origin) {
+    if (ApiConfig.httpSafeOrigin !== window.location.origin) {
         window.alert('The bounce application must only be used from the sandbox domain, ' +
             'please report this issue on https://github.com/xwiki-labs/cryptpad');
         return;