Re: Should be simple, What don't I see?

[Aristotle]

use strict;
use HTML::Entities ();

my $firstName = 'first';
my $lastName = 'last';
my $email = '[e-mail]';

# do it The One Correct Way
print HTML::Entities::encode("$firstName $lastName <$email>");

See also: perl.com: Preventing Cross-site Scripting Attacks

Makeshifts last the longest.