Thinking about this some more another approach altogether comes to mind. By simply eliminating the txs with duplicate hashes from any block while retaining order otherwise, we not only eliminate the possibility of seeing this type of malleation, we can also provably obtain the actual block from someone attempting DoS.