diff --git a/src/Orchard.Web/Web.config b/src/Orchard.Web/Web.config
index 630518098..8cef8bee4 100644
--- a/src/Orchard.Web/Web.config
+++ b/src/Orchard.Web/Web.config
@@ -18,7 +18,8 @@
 		<defaultSettings timeout="00:30:00"/>
 	</system.transactions>
 	<system.web>
-		<!-- 
+    <httpRuntime requestValidationMode="2.0" />
+    <!-- 
             Set compilation debug="true" to insert debugging 
             symbols into the compiled page. Because this 
             affects performance, set this value to true only