That did it. Thanks. :-)

The problem was coming from Data::FormValidator; I had untaint_all_constraints => 1 set, and when there was nothing that matched (user submits 'a' and the regex is /^\d+$/, for example), Data::FormValidator was throwing out those warnings.