-w activates warnings globally, which causes escapeHTML to warn when you pass undef to it.

Fixed:

my $msg_html   = escapeHTML( $q->param( 'msg'   ) // 'No msg'   );
my $error_html = escapeHTML( $q->param( 'error' ) // 'No error' );
[download]