Off-by-slash vulnerability in nodejs.org and iojs.org

Original Report: https://hackerone.com/reports/1631350 The reason for submitting this report is written in the comment of the original report.

    location /metrics {
        alias /home/dist/metrics/;
        autoindex on;
        default_type text/plain;
    }