I've encountered this problem before, the reason for it is that the data posted back to the sever contains some client side scripting code, and this will lead to some kinda security preach, so by default, the enableEventValidation is set to true.

Sheva