Update website with CalDAV support and privacy research

- Add KDoc link to navigation header
- Update hero to mention CalDAV providers (iCloud, Nextcloud, etc.)
- Add "Your calendar is an attack surface" section with AI research
- Add ICS subscriptions and full-text search features
- Update widget description (multiple widgets)
- Add KashCake link in footer

Author: one-kash

index.html

@@ -846,6 +846,7 @@
             <a href="#features">Features</a>
             <a href="#download">Download</a>
             <a href="https://github.com/KashCal/KashCal">Source</a>
+            <a href="https://kashcal.github.io/KashCal/">KDoc</a>
         </div>
         <button class="menu-btn" aria-label="Open menu" aria-expanded="false">☰</button>
     </nav>
@@ -855,6 +856,7 @@
         <a href="#features">Features</a>
         <a href="#download">Download</a>
         <a href="https://github.com/KashCal/KashCal">Source ↗</a>
+        <a href="https://kashcal.github.io/KashCal/">KDoc ↗</a>
     </div>
 
     <section class="hero">
@@ -864,8 +866,7 @@
         </div>
         <h1>The calendar that respects your privacy</h1>
         <p class="hero-subtitle">
-            Modern. Works offline. Syncs with iCloud.
-            No tracking, no accounts, no nonsense.
+            Private by default. Syncs with iCloud, Nextcloud, and any CalDAV server — if you choose.
         </p>
         <div class="cta-buttons">
             <a href="https://github.com/KashCal/KashCal/releases/latest" class="btn btn-primary">
@@ -902,6 +903,17 @@ <h3>Cloud Dependent</h3>
         </div>
     </section>
 
+    <section class="section" style="text-align: center;">
+        <p class="section-label">It Gets Worse</p>
+        <h2 class="section-title">Your calendar is an attack surface</h2>
+        <p class="section-subtitle" style="max-width: 700px;">
+            <a href="https://www.miggo.io/post/weaponizing-calendar-invites-a-semantic-attack-on-google-gemini" style="color: var(--accent);">Recent research</a>
+            (<a href="https://web.archive.org/web/20260121052414/https://www.miggo.io/post/weaponizing-calendar-invites-a-semantic-attack-on-google-gemini" style="color: var(--text-secondary);">archived</a>)
+            demonstrated how attackers can weaponize calendar invites to extract private data through AI assistants.
+            A single malicious invite can trigger silent exfiltration of your entire schedule.
+        </p>
+    </section>
+
     <section class="section solution" id="features">
         <div class="solution-content">
             <div class="solution-text fade-in">
@@ -918,7 +930,7 @@ <h2>Your calendar.<br>Your device.<br>Your rules.</h2>
                     </li>
                     <li>
                         <span class="check">✓</span>
-                        <span><strong>iCloud sync</strong> — Keep using Apple Calendar on Android</span>
+                        <span><strong>CalDAV sync</strong> — iCloud, Nextcloud, Baïkal, Radicale, and more</span>
                     </li>
                     <li>
                         <span class="check">✓</span>
@@ -934,7 +946,15 @@ <h2>Your calendar.<br>Your device.<br>Your rules.</h2>
                     </li>
                     <li>
                         <span class="check">✓</span>
-                        <span><strong>Home widget</strong> — Today's agenda at a glance</span>
+                        <span><strong>Multiple widgets</strong> — Agenda, date, and week for your home screen</span>
+                    </li>
+                    <li>
+                        <span class="check">✓</span>
+                        <span><strong>ICS subscriptions</strong> — Subscribe to external calendars</span>
+                    </li>
+                    <li>
+                        <span class="check">✓</span>
+                        <span><strong>Full-text search</strong> — Find events instantly</span>
                     </li>
                 </ul>
             </div>
@@ -1006,6 +1026,7 @@ <h2>Also available on</h2>
             <a href="https://github.com/KashCal/KashCal">Source Code</a>
             <a href="https://github.com/KashCal/KashCal/issues">Report Issue</a>
             <a href="https://github.com/KashCal/KashCal/blob/main/LICENSE">License</a>
+            <a href="https://github.com/KashCal/KashCake">KashCake</a>
         </div>
         <p class="footer-note">
             © <span id="year"></span> KashCal · No data collected. Ever.