foreach (keys %params)
{
    <untaint $params{$_} - see below>

    $params{$_} = Encode::decode_utf8($params{$_});
}