Off-by-slash vulnerability in nodejs.org and iojs.org

**Summary:** Configuration files for Nginx in nodejs/build repository have multiple off-by-slash misconfigurations. Because nodejs.org and iojs.org are deployed using those files, it is possible for an attacker to gain access to unexpected directories. (**This report is not related to …

    location /metrics {
        alias /home/dist/metrics/;
        autoindex on;
        default_type text/plain;
    }