in reply to initialize ENV variables under strict

Are you trying to use what an end system is set to by default?
(if indeed this environment var is set on some system....... not yours ;-)

Perhaps try:
$ENV{'QUERY_STRING'} = "" unless defined $ENV{'QUERY_STRING'};
Environment variables taken from your system, not set by you, are tainted. You may need to untaint it first.