Hi @juniormint ,
From my research, the effective method is to use Escape Function for javascript. The escape() function was deprecated in JavaScript version 1.5. Use encodeURI() or encodeURIComponent() instead.
You could refer to the case: SSRS - Opening sub-report in a new window "&" issue.
Hope this helps.
Best Regards,
Joy