Okay, the culprit is Ghostery. Disabling it solves the problem.

What's weird is that on Windows it doesn't block the requests to css or js files like this; but obviously the problem lies with this extension.