Removing XSS vulnerability in queryStringToJSON()

Removing a very dangerous eval(), that operates on all params, one or more of which could be arbitrary javascript. There may still be some issues with the advanced part.