xterm.js could fire some validate callback which asks the consumer whether the link is valid and could then deactivate it if so.