lectio.git - offline Catholic daily readings and liturgical calendar in Go, with CLI, TUI and web clients

	Commit message (Collapse)	Author	Age	Files	Lines
*	docs: design spec for calendar API (JSON + iCal), security-first	Lukasz Kasprzak	2026-07-27	1	-0/+125
	Two surfaces, one engine: CLI --format json\|ical (offline/pipeable) + thin lectio-web /api/calendar.json + /calendar.ics endpoints. Pure internal/calfeed renderer. Identity + reading citations (no full text). Security section: range-cap DoS control (1830d web), RFC-5545 iCal injection escaping (custom calendar names are untrusted), strict input validation, nosniff content types, no file/layer injection over HTTP, GET-only.