I lied. Not on purpose, honest guv.

The problem was the taint mode, not CGI.

Also, I am stupid. Kids, your laugh for the day: I thought that local %ENV; localises it for the lexical scope (so it is automatically restored to its original contents after the block ends). But this statement also empties the hash!

Thanks for the impulse, ig.