Prevent stacks multiplier href exploit

Recently found and fixed on /tg (#5159).

No reason not to share it...