Currently you're able to react to a message without providing a valid emoji.

setReaction needs to check for a valid emoji, regular and custom, before accepting the reaction.

Useful snippets:

RocketChat.models.EmojiCustom.findByNameOrAlias(filterReg, options)
RocketChat.emoji.list[regularEmoji]