Tested Target had ClamAV installed, which silently were blocking our injected Javascript Code.
as soon as the AV was disabled, the injected code was executed. 

Gamma have to test FFWeb with against common AVs. if it is blocked, Gamma should try to find a way to bypass the AV with modified Javascript Code.