Use qs 1.2.x to prevent denial-of-service

Closed #65