I don't know why but escapeHTML doesn't always work for me. But I can always get code to render in a textarea or hidden form field by using HTML::Entities.

use HTML::Entities;
&encode_entities($string)
[download]

And if you need to decode:

&decode_entities($string)
[download]