diff --git a/csharp/ql/src/change-notes/2026-07-13-CWE-601.md b/csharp/ql/src/change-notes/2026-07-13-CWE-601.md
new file mode 100644
index 00000000000..237ee562a52
--- /dev/null
+++ b/csharp/ql/src/change-notes/2026-07-13-CWE-601.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* `System.Web.HttpRequest.RawUrl` is no longer treated as a sanitizer for `cs/web/unvalidated-url-redirection`, since it contains the un-normalized request line. This may lead to more results.