if($str =~ /([\w\.]+)\@([\w\.]+)/) {
    $untainted = "$1\@$2";
}