Security fix for invoice view.