fail fast if content_for contains safe string