== Ask Yourself Whether

* the developer doesn't know the impact to deactivate the Request Validation feature
* the web application accepts user-supplied data
* all user-supplied data are not validated

There is a risk if you answered yes to any of those questions.