The value of validateRequest is set to ’true’ by default, which means that the framework will automatically deny submission of the ’<’ and ’>’ characters.