$input{$key} = HTML::Entities::encode($urlparams{$key});
         #                                      ~~~~~~~~~