Disable escaping for ogns variable

[revoltek-daniel]

disable escaping to preserve quotes in html attribute

[tractorcow]

This could potentially change the default escaping for the entire object; Potentially creating a severe XSS vulnerability.

What quotes do you think should not be escaped safely?

[tractorcow]

Can I suggest this

private static $casting = [
    'OGNS' => 'HTMLFragment',
];

That will not affect any other property. :)

[revoltek-daniel]

Looks like the better way to do it. I've changed it.

I'm pretty new to silverstripe so I did not recognize that there are more than the OGNS variable.

[tractorcow]

Thanks @revoltek-daniel !