Are you trying to use what an end system is set to by default?
(if indeed this environment var is set on some system....... not yours ;-)

Perhaps try:

$ENV{'QUERY_STRING'} = "" unless defined $ENV{'QUERY_STRING'};
[download]

Environment variables taken from your system, not set by you, are tainted. You may need to untaint it first.