New post-login action is breaking when adding a & to a scope

Our previous rule had a rule that added custom scopes. Some of the scopes have ampersands in them. This used to work with the rules flow, but with actions it’s cutting off the scopes where the & is. Is there a way to escape these in the Action?