xhr intercepted, a general problem: injected scripts might not run first!