# Can Read https://hosted.mender.io/ui/env.js file

**URL:** <https://hub.mender.io/t/can-read-https-hosted-mender-io-ui-env-js-file/4035>\
**Category:** General Discussions\
**Created:** [August 27, 2021, 7:20am UTC](https://hub.mender.io/t/can-read-https-hosted-mender-io-ui-env-js-file/4035 "2021-08-27T07:20:22Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![doganmurat](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/doganmurat/32/573_2.png) [@doganmurat](https://hub.mender.io/u/doganmurat)\
**Post date:** [August 27, 2021, 7:20am UTC](https://hub.mender.io/t/can-read-https-hosted-mender-io-ui-env-js-file/4035/1 "2021-08-27T07:20:22Z")

</div>

[https://hosted.mender.io/ui/env.js](https://hosted.mender.io/ui/env.js) is open to read by everyone.  
Is that normal?

---

<div class="post-metadata">

**Author:** ![tranchitella](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/tranchitella/32/606_2.png) [@tranchitella](https://hub.mender.io/u/tranchitella)\
**Post date:** [August 27, 2021, 8:47am UTC](https://hub.mender.io/t/can-read-https-hosted-mender-io-ui-env-js-file/4035/2 "2021-08-27T08:47:11Z")

</div>

Hello @doganmurat,

Yes, it is normal and intended. The env.js file is interpreted by the browser and configures the UI, and for this reason you can download it, as you pointed out. It doesn’t contain secrets, only configuration settings and public keys.

---

<div class="post-metadata">

**Author:** ![doganmurat](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/doganmurat/32/573_2.png) [@doganmurat](https://hub.mender.io/u/doganmurat)\
**Post date:** [August 27, 2021, 9:07am UTC](https://hub.mender.io/t/can-read-https-hosted-mender-io-ui-env-js-file/4035/3 "2021-08-27T09:07:00Z")

</div>

Ok.  
It also contains version infos etc.  
I thought maybe it is not intended to be read by everyone.  
No problem than.

---

<div class="post-metadata">

**Author:** ![tranchitella](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/tranchitella/32/606_2.png) [@tranchitella](https://hub.mender.io/u/tranchitella)\
**Post date:** [August 27, 2021, 9:10am UTC](https://hub.mender.io/t/can-read-https-hosted-mender-io-ui-env-js-file/4035/4 "2021-08-27T09:10:16Z")

</div>

I confirm the version numbers are needed, too. We use them in the onboarding snippets you can copy and paste, as well as for debugging purposes.