in reply to Untainting input to CGI::Application
CGI::Application's query() method should return a CGI object, so you can use CGI::Untaint just the same way as you used to with plain CGI.
Just my $0.02, I've never used CGI::Untaint.
In Section
Seekers of Perl Wisdom