It rendered the phishing HTML, but you can't interact with it. I guess it's because the script is stopping the render of facebook after the request has been mad

It rendered the phishing HTML, but you can't interact with it. I guess it's because the script is stopping the render of facebook after the request has been made (hence the www.facebook.com site), providing another security layer, as you can't be phished with an unresponsive website. And I don't think javascript would make a difference.