use HTML::Entities ();
$content = HTML::Entities::encode($content, '&<>');