I have an SVG file which refers to a font file with @font-face. It's working properly. But when including that svg file in html using an <img> tag, the font isn't loaded.

I presume this is some security thing guarding against transitive loads. But what's the right practice here? What are the actual restrictions? How do I make the svg so that it renders properly in html?