displaying html received via post

I created a page that receives an html report from post data. This html is split up into pages and displayed in divs (as well as used to create a .pdf file but I don't think that is a security risk if the displaying it isnt a risk).


My concern is that I had to set ValidateRequest="false" in order to be able to do this. If the page somehow received malicious input with a serverside script or something, would the script run / could this be dangerous?
This is how I'm handling the request: I have a div with runat="server." Then, in the page_load event (i'm using vb.net codebehind) i set the div.innerHTML property to a modified version of the html received via post.


thanks!
...