First you probably want to read the perlsec manpage and then you will want to sanitize your environment with something like:

delete @ENV{qw(IFS CDPATH ENV BASH_ENV)};

$ENV{PATH} = '/bin:/usr/bin';
[download]

/J\