Per default, the .NET framework verifies each POST request for malicious code. HTML is considered as malicious, thus the server responds with an error message when HTML code is found within the POST request.

To avoid the verification of the POST request you can turn it off by adding the following line to your code: <%@ Page Language="C#" validaterequest="false" %>