If you use an iframe yes, that is the problem.
But the airovic.com tool uses and external script, in the same server that provides http tunneling from same server, so I can modify headers and display everything on the iframe because it is under same domain.
Thanks for your comment!