In our Web.config file we have:
<pages validateRequest="false"...
and I get no errors with the contact form. This is not a new change, this configuration has been there as long as I can remember.
in our .NET 4 Web.config we also have this:
<httpRuntime requestValidationMode="2.0" maxUrlLength="560" maxQueryStringLength="2048" />
Best,
Joe