File upload form data now properly escapes special characters (newlines, backslashes, quotes) in filenames, preventing malformed multipart requests.
Evidence
Filename escaping function hMK() (search for "Content-Disposition: form-data" in the string changes)
Strings lifted out of the shipped bundle, so the claim above can be checked against them.