no inline script, v2 manifest