my $cgi = CGI->new(); use HTML::Entities; sub escapeParams { my( $self ) = shift; my @params = $self->query->param('<>&"'); foreach my $param ( @params ) { # $self->query->param( $param, HTML::Entities::encode( $self->query->param( $param ) ) ); $self->query->param( HTML::Entities::encode($param), HTML::Entities::encode( $self->query->param( $param ) ) ); print $self->query->param( $param ); } } escapeParams($cgi);