I know this is probably an older topic, but I had the same issue and I solved it by modifying the mod_security rules of my hosting env. In my case, it was not invoice ninja, but the shared hosting. You can refer to my other thread
.htaccess - Running Invoice Ninja in a subfolder - Self-Hosted | v5 - Discourse
Maybe this might help somebody ending up here…