I have webapp I run from localhost (because of debugging) and it makes cross-domain AJAX requests. I can easily set flag for Chrome \"--disable-web-security\" and the webapp
Solution is to set a header Access-Control-Allow-Origin: * on the server.
Access-Control-Allow-Origin: *
In PHP it's easy like this:
header("Access-Control-Allow-Origin: *");
Credit for the answer goes to Brain2000, thanks for suggesting a link in your comment.