Have you added the Validate Input attribute to the controller method?
[ValidateInput(false)]
, web.config, -, mvc, , , .
<system.web>
<httpRuntime requestValidationMode="2.0" />
</system.web>
<system.webServer>
<validation validateIntegratedModeConfiguration="false" />
</system.webServer>