I've just rigged up a little test on my PC. Here is the code and result.
1) HTML is as follows:
<html>
<head>
<script type='text/javascript' src='../../steal/steal.js'></script>
</head>
<body>
<script type='text/javascript'>
console.log("Pre--test");
steal('http://localhost/testswarm/js/inject.js', function(CAN){
window.can= CAN;
console.log("Hello");
});
</script>
</body>
</html>
2) Tested using steal 3.2.1, seems to work.
2) Tested using steal from git 3.2.3. On chromium browser.
Output is as follows: