validateRequest directive

[Tascien]

I think using a form without validateRequest=false is almost
impossible because the users will use < or > chars sometime, for sure.
for example:

<[email protected]> in the text box, etc...

just wondering, what security problem does validateRequest=false
cause?

Thanks.