Chrome Version       : 49 (updated yesterday from 48)
Other browsers tested:
  it works in 48

What steps will reproduce the problem?
1. Come to work open your development environment which consists of a local copy of the website accessing a remote webservice so Access-Control-Allow-Origin
2. open  -a  /Applications/Google\ Chrome.app -F -n --args --allow-running-insecure-content --disable-web-security
3.. Error http://prnt.sc/aazuuu (a web security disabled header is visible but it's not disabled)

What is the expected result?
Do some work today

What happens instead?
I ask the project manager to do nothing until the error is fixed because it's Friday :) ... didn't work but it was worth a try

 http://prnt.sc/aazuuu