$evil_html =~ s/</&lt;/g;
$evil_html =~ s/>/&gt;/g;