"...my own CGI untainting library which uses regular expression variables like qr/^.*$/ to validate incoming data."

Err, your example regex validates nothing; untaints nothing. If it's merely a simple example that occured to you for the purposes of your question, fine; if you believe it's doing something useful, you err.