Robustness against harmful content generation