Unable to configure user-css due to CSP

[cjdelisle]

I tried configuring a custom css file which was something served on my local Chromebook by the http extension. I ran into this:

Refused to load the stylesheet 'http://localhost:8887/mosh/mosh.css' because it violates the following Content Security Policy directive: "style-src 'self' blob: filesystem: data: chrome-extension-resource: 'unsafe-inline'". Note that 'style-src-elem' was not explicitly set, so 'style-src' is used as a fallback.

This is 0.4.5 (mainline), I figure it's a bug because the documentation on user-css references accessing outside websites.