HTML Escaping for perl

Question

I have a html code assigned to a perl variable

1) my $content;

$content .= qq~<input type='hidden' name='Email' value='~.$ARGS{Email}.qq~' />~;

Another one is this:

2) <form name="email_form" id="email_form" class="form-inline <% $ARGS{Email} ? 'hide' : '' %>" >

How to do mason substitution for these?

For the second one, is this right?

<form name="email_form" id="email_form" class="form-inline <% $ARGS{Email} | h ? 'hide' : '' %>" >

Answer 1

Use CGI's escapeHTML or some equivalent

use CGI qw(escapeHTML);

$content .= qq~<input type='hidden' name='Email' value='~. escapeHTML($ARGS{Email}) .qq~' />~;