> but for security reasons (something about cross-site foo), you can't use it when testing an HTML file on your disk,

I think you can disable that check as a command line option. I cannot check it right now since I don't have chrome installed however I think it was --allow-file-access-from-files .