use HTML::Entities ;

my $string = '[< smarto  >]';

my $unsafe_chars = '[]';
my $encoded = encode_entities($string)
                =~ s{([\Q$unsafe_chars\E])}{sprintf"&#%d;",ord$1}egr;

print "$string\n$encoded\n";