Unescaped parameters
Calls back to the legacy factory are not properly escaping the path parameters. For example, try a request with a space in the title.
Suggested fix:
Call querystring.escape(obj.title)
in the LegacyFactory.urlEncode
method. Potentially escape other parameters as well though no other parameters should contain invalid characters...