From ae06b778e5203ee3773b987c34bfa151bce6727a Mon Sep 17 00:00:00 2001 From: Michael Nebel Date: Mon, 13 Jul 2026 15:29:18 +0200 Subject: [PATCH] C#: Add change-note. --- csharp/ql/src/change-notes/2026-07-13-CWE-601.md | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 csharp/ql/src/change-notes/2026-07-13-CWE-601.md diff --git a/csharp/ql/src/change-notes/2026-07-13-CWE-601.md b/csharp/ql/src/change-notes/2026-07-13-CWE-601.md new file mode 100644 index 00000000000..237ee562a52 --- /dev/null +++ b/csharp/ql/src/change-notes/2026-07-13-CWE-601.md @@ -0,0 +1,4 @@ +--- +category: minorAnalysis +--- +* `System.Web.HttpRequest.RawUrl` is no longer treated as a sanitizer for `cs/web/unvalidated-url-redirection`, since it contains the un-normalized request line. This may lead to more results.