in reply to Switching out characters inside links
See also the escapeHTML() routine provided by the CGI module.