use CGI;
 $value =  escapeHTML (qq{"Product1"});