in reply to How do I untaint data obtained from http?

also look at the perlrun manpage for -T .. it has a description and also points over to the perlsec manpage which discusses untainting in depth, including $ENV{PATH}