ok, i thought the querystring had some check/sanitize, but is just copied as is, so checking is really useless. 

but setting it inside that if-block would fail to pass when the preg_match above ( #LOR919 ).
what about a simple: 
$redirectURI .= eZSys::queryString();