I found that adding --test-type in addition to --disable-web-security will allow local testing without the warning banner.