my $newval = CGI::escape(qq("tulips & Flowers:)); #### use CGI.pm my $q = new CGI; my $xml = CGI::unescape($q->param('xml'));