I'm getting the above exception when I'm trying to submit a form in ASP.NET.
This post was really helpful but even after setting ValidateRequest="false" I get this error only for "&#" combination. This specific combination is required since we are using Norwegian characters.
And I have set httpRuntime requestValidationMode="2.0" in web.config as well.