# a bit hacky way to redefine subs without modifying sources; this
# code can be put directly into Template::Secure module
{
    require Template::Plugin::URL;
    require Template::Plugin::HTML;

    no warnings 'redefine';

    my $url_escape_sub = \&Template::Plugin::URL::escape;

    *Template::Plugin::URL::escape = sub {
        my $ret = $url_escape_sub->(@_);
        $ret =~ /(.*)/; # untaints string
        return $1;
    };

    my $html_escape_sub = \&Template::Plugin::HTML::escape;

    *Template::Plugin::HTML::escape = sub {
        my $ret = $html_escape_sub->(@_);
        $ret =~ /(.*)/; # untaints string
        return $1;
    };

}