Currently, we embed the HTML of the sources. This is generally okay as we can assume the sources to be trusted by the creator of the calendar. However, the sources could contain HTML text. This text must be escaped and tested for safety.
Ideas:
Pay now to fund the work behind this issue.
Get updates on progress being made.
Maintainer is rewarded once the issue is completed.
You're funding impactful open source efforts
You want to contribute to this effort
You want to get funding like this too