I am automating an email with text from an untrusted scalar $body.

    use HTML::Entities;

    open MAIL, q(|/usr/lib/sendmail -t -f 'bar@bar.com')
            or die 'cant open sendmail';

    print MAIL "From: foo <bar\@bar.com>\n";
    print MAIL "To: boo <far\@far.com>\n";
    print MAIL "\n";
    print MAIL encode_entities($body),"\n";
    print MAIL ".\n";
    close MAIL;
[download]

The encode_entities is clearly overkill.

Is there an equivilant for whatever encoding is correct for email? Or would no encoding be safe even though $body is untrusted?

-Andrew.