balupton/jquery-sparkle — pull request #5 by Hillgod (2013-10-30 18:56:26+00:00)
Title: #4 Removing XSS vulnerability in queryStringToJSON()

Removing a very dangerous eval(), that operates on all params, one or more of which could be arbitrary javascript. There may still be some issues with the advanced part.