use CGI;      # you already have this line
$q = new CGI; # and one like this to I suppose
my $var = "some text from a file";
my $varesc = $q->escapeHTML($var);