diff --git a/javascript/src/iframe/viamapi-iframe.js b/javascript/src/iframe/viamapi-iframe.js
index 2db81cf0759f0bfc083f9d32fd9d3ad50dad6415..fbbb1388310a9090ca9be45fa94f703eb7363573 100644
--- a/javascript/src/iframe/viamapi-iframe.js
+++ b/javascript/src/iframe/viamapi-iframe.js
@@ -1045,6 +1045,10 @@ const connection = Penpal.connectToParent({
         return encodeResponse("400", "", "Identity not authenticated");
       }
 
+      path = encodeURI(path);
+      contentType = encodeURI(contentType);
+      title = encodeURI(title);
+
       const config = {
         headers: {
           path,
@@ -1072,6 +1076,9 @@ const connection = Penpal.connectToParent({
         return encodeResponse("400", "", "Identity not authenticated");
       }
 
+      resourceid = encodeURI(resourceid);
+      contentType = encodeURI(contentType);
+
       const config = {
         headers: {
           'Content-Type': 'multipart/form-data',