function isValid(url) {
    return /^http(s)?:\/\/[0-9a-z.-]+\.security.com$/gi.test(url);
}

var url = window.location.hash.substr(1);

if (isValid(url)) {
    window.location = url;
}