On VE load, do an "originalHtml == serialise(linmod(originalHtml)" or whatever and fail out of the VE if false; ideally, also allow the user to submit a failure report for debugging purposes (this will need to get checked through with legal).
Version: unspecified
Severity: major