"create" script (and possibly others) provided in bin directory do not escape arguments

The script has multiple points of failure if there are spaces anywhere in either the path to the extracted bin dir, or the path to the target. It seems that there is insufficient argument escaping when passing the derived variables, like $R, on to other scripts and programs.

Basically, I can't create a new Cordova project without renaming swathes of dirs in our development environment.