my $string = '[I haz square brackets]';
my $unsafe_chars = '[]';
# first pass encodes default set
my $pass1= encode_entities( $string );
# second pass encodes speshul chars
my $encoded = encode_entities( $pass1, $unsafe_chars );