$content =~ s/&/&/g;
$content =~ s/</&lt;/g;
$content =~ s/>/&gt;/g;  # optional.
print("<textarea>$content</textarea>");

##</code><code>##

open(FILE, "> file.html");
print FILE $cgi->param('content');
close(FILE);