I tried this in the head section but doesn't work:
<script type="text/cycript" charset="utf-8" src="Scripts/cycript.cy"></script>
Thanks.
Cycript runs standalone on Android and Linux and provides access to Java, but without injection ! Never saw it linked from HTML (src include javascripts).