Add sanity check for cask token

Library/Homebrew/api/cask-source.rb

@@ -10,14 +10,20 @@ module Homebrew
       class << self
         extend T::Sig
 
+        CASK_TOKEN_REGEX = %r{^(homebrew/cask/)?[a-z0-9\-_]+$}.freeze
+
         sig { params(token: String).returns(Hash) }
         def fetch(token)
-          token = token.sub(%r{^homebrew/cask/}, "")
+          token = token.delete_prefix("homebrew/cask/")
           Homebrew::API.fetch "cask-source/#{token}.rb", json: false
         end
 
         sig { params(token: String).returns(T::Boolean) }
         def available?(token)
+          # Sanity check before hitting the API
+          return false unless token.match?(CASK_TOKEN_REGEX)
+
+          begin
             fetch token
             true
           rescue ArgumentError
@@ -26,4 +32,5 @@ module Homebrew
         end
       end
     end
+  end
 end