@@ -23,7 +23,12 @@ upgrading your version of coverage.py.
2323 Unreleased
2424----------
2525
26- Nothing yet.
26+ - Fix: in the HTML report, a source file name containing a double quote (legal
27+ on POSIX) wasn't escaped where it's dropped into the ``href `` of the index
28+ and prev/next links, so it could close the attribute early and inject markup.
29+ Page URLs are now escaped. Thanks, `Rajath Mohare <pull 2227 _>`_.
30+
31+ .. _pull 2227 : https://github.com/coveragepy/coveragepy/pull/2227
2732
2833
2934.. start-releases
@@ -74,11 +79,6 @@ Version 7.15.1 — 2026-07-12
7479 close the inline ``<script> `` element in a file page early, injecting markup.
7580 Context labels are now fully escaped. Thanks, `Rajath Mohare <pull 2224 _>`_.
7681
77- - Fix: in the HTML report, a source file name containing a double quote (legal
78- on POSIX) wasn't escaped where it's dropped into the ``href `` of the index
79- and prev/next links, so it could close the attribute early and inject markup.
80- Page URLs are now escaped. Thanks, `Rajath Mohare <pull 2227 _>`_.
81-
8282- A number of performance improvements thanks to Paul Kehrer, in pull requests
8383 `2213 <pull 2213 _>`_, `2214 <pull 2214 _>`_, `2215 <pull 2215 _>`_, `2216
8484 <pull 2216_> `_, `2218 <pull 2218 _>`_, `2220 <pull 2220 _>`_, and `2221 <pull
@@ -92,7 +92,6 @@ Version 7.15.1 — 2026-07-12
9292.. _pull 2220 : https://github.com/coveragepy/coveragepy/pull/2220
9393.. _pull 2221 : https://github.com/coveragepy/coveragepy/pull/2221
9494.. _pull 2224 : https://github.com/coveragepy/coveragepy/pull/2224
95- .. _pull 2227 : https://github.com/coveragepy/coveragepy/pull/2227
9695
9796.. _changes_7-15-0 :
9897
0 commit comments