Topic: separation of concern question

I have a model which is coupled with controllers with methods to do things like CGI escaping. How can i de-couple them?