There seems to be no way to disable it currently. It has been recommended online that passing --disable-web-security to QApplication should disable security, but this doesn't work.

In some cases users care about flexibility more than about security. For this reason, the user running webkit browser should be able to turn the checks off.

Message in question: Origin %%URL%% is not allowed by Access-Control-Allow-Origin."