use CGI qw/:html :form/;
my $val = q{ "Hello" <world> &amp; };
print textfield('foo',$val), "\n";
__END__
<input type="text" name="foo" value=" &quot;Hello&quot; &lt;world&gt; &amp;amp; " />