my $newval = CGI::escape(qq("<xmltag>tulips &amp; Flowers:</xmltag>));