Incorrect transformation of file name upload

In Rails 2-3-stable I have this with Rack 1.1.0:

If we upload a file with double quotes in file name, like: 01 "Our" Dawn Of Glory.mp3,
we can observe the following in this file:
http://github.com/rails/rails/blob/2-3-stable/actionpack/lib/action...

value will contain:

{:head=>"Content-Disposition: form-data; name=\"media\"; filename=\"01 \"Our\" Dawn Of Glory.mp3\"\r\nContent-Type: application/octet-stream\r\n", :type=>"application/octet-stream", :tempfile=>#<File:/var/folders/M4/M4NWfTkfE7uqHvtn2VpEdk+++TI/-Tmp-/RackMultipart20101017-53020-1xgqkng-0>, :name=>"media", :filename=>"01 "}

Note the :filename parameter gets truncated.
So in original_path we will have an invalid filename:

upload.original_path = value[:filename] # "01 "

This caused issues with plugins such paperclip.

Bad value is being returned from here, which is an override of Rack's GET method:
http://github.com/rails/rails/blob/2-3-stable/actionpack/lib/action...

I cannot test a newer version of Rack on Rails 2-3-stable.

So while the problem may be fixed in recent version of Rack, since Rails 2-3-stable depends on

gem 'rack', '~> 1.1.0'

I think it's worth taking a look, even because plugins such Paperclip tries to delete a file if it encounters error during processes, and it's trying to delete "/tmp/mydir/.". due to filename transformation to determine the content_type.

Also if one have custom cleaning up logic for Files and Directories this can be a potential security issue.