Fix a spurious warning under taint mode

Bug-Debian: https://bugs.debian.org/762334

This is currently breaking the CGI-Application-Plugin-AJAXUpload test suite. It's unclear to me why it only happens in taint mode. I've added a copy of t/warnings.t, run under -T, which triggers the same problem.