I might be going blind but I don't see where you are setting anything in %CONFIG - did you mean to use %GLOENV instead ? Even if that were the case you aren't reassigning the unescaped value back to the hash.

BTW Why are you re-inventing this particular wheel? There are modules on CPAN that do this, almost certainly better, and of course the CGI module already comes with recent versions of Perl - Update: abstracts explains it better in Re: HTML Decoding

/J\