I have had to jump through many many hoops to get the Narrative Report to work locally using file: scheme rather than from a web server. The problem concerns passes data between frames. the HTML5 postMessage is the best solution but does not work with all browsers and so I had to resort to passing data between frames via the location URL follwing a hash # character. This is what you are seeing.
Personally I install nginx web server on my PC and access reports via that but I don't think all users will what to do that.
I still fail to understand why accessing files from the same folder on a PC is less secure than accessing the same files from a folder on the web! To me the policy is illogical or poorly implemented.