Skip to main content
no code neededunlimited viewsfree forever

Free Google Review Widgets via iFrame

Embed Google reviews on environments that strip <script> tags — locked-down CMSes, SharePoint, ServiceNow, WordPress.com Free, intranet portals, HTML newsletters. The universal fallback when the standard script embed is blocked.

Build Your Google Review Widget

Google

Or just type your business name + city — add the country too if the business isn't near you.

Key facts: universal <script>-tag fallback · works on script-restricted CMSes · SharePoint + ServiceNow compatible · no JavaScript loader required · same renderer as the script embed · manual min-height (600–800px typical)

Last updated ·by Mike Ragimov

SEO + AI schema · paid plans

Review schema markup, on paid plans

Paid widgets add schema.org Review and AggregateRating JSON-LD to the page they sit on, so search engines and AI answer engines can read your Google reviews as structured data. Google does not show review stars for reviews a business shows about itself, so the gain is readability, not stars. The free plan shows the reviews without the schema. See how the schema works

Why Use the iFrame Embed for Google Reviews?

The universal escape hatch. When the standard script embed is blocked, iframe always works.

Bypasses Script-Stripping CMSes

Locked-down enterprise CMSes and intranet portals strip <script> tags by policy. The iframe is just an HTML element — it always survives. SharePoint, ServiceNow, WordPress.com Free, custom IT-locked CMSes.

No JavaScript Loader on Host

The host page never loads any BlooTrue JavaScript. Pure HTML iframe element. Useful for compliance-strict environments (healthcare, legal, government) that audit every <script> they let onto a page.

Same Renderer as Script Embed

The iframe URL is the same endpoint the script loader mounts internally. Pixel-identical Google review output — same theme, same styles, same data refresh cadence.

Works on URL-Only Embed Slots

Notion, some wikis, headless CMSes that whitelist by domain — anything with a 'paste a URL' embed field accepts the iframe URL directly. No HTML editing required in some cases.

How Do I Embed Google Reviews via iFrame?

Four steps. The only manual bit is extracting your widget ID from the standard snippet.

1

Build Your Widget and Get the Embed Code

Use the BlooTrue builder on this page. Search for your business name or paste your Google Maps share link, pick a style, then click Get Embed Code below to grab the standard snippet.

You only need a single value out of that snippet — the widget ID. Step 2 covers it.

2

Pull the Widget ID Out of the Snippet

Read the snippet — your ID is the part after blootrue-widget- in the <div> class.

Example — given class="blootrue-widget-abc123", the ID is abc123. Copy just that string.

3

Replace the Snippet with an iFrame Tag

Replace the standard <script> + <div> snippet with this iframe instead:

<iframe
  src="https://api.blootrue.com/api/widgets/embed/YOUR_ID/render"
  style="border:0;width:100%;min-height:600px;"
  frameborder="0"
  title="Reviews">
</iframe>

Swap YOUR_ID for the ID you grabbed in step 2. The iframe URL is the same endpoint the script loader mounts internally — same widget, just a different mount strategy.

4

Paste the iFrame Wherever You Can Write Raw HTML

Paste the iframe wherever you can write raw HTML — locked-down CMSes, SharePoint web parts, ServiceNow content blocks, Notion HTML embeds, headless CMS rich-text fields, intranet portal pages.

Heads-up: iframe mode loses auto-resize, so set min-height generously. 600–800px is typical for Google review widgets — pick the higher end for Grid or Masonry styles. If you set min-height too low you'll see internal scrollbars in the widget.

Reviews still auto-sync from Google every 24 hours — the iframe just refreshes the rendered widget on each load.

Where Does iFrame-Only Embed Make Sense?

Whenever the host environment strips or blocks <script> tags.

Locked-Down Enterprise CMSes

IT departments often configure CMSes to strip <script> tags as a baseline security policy. Iframe always survives the filter — it's a static HTML element with no JavaScript surface area on the host page.

SharePoint and ServiceNow Intranets

Intranet portals like SharePoint and ServiceNow CMS frequently block third-party scripts via Content Security Policy. They typically allow iframes (often via a dedicated "Embed" or "Page Viewer" web part). Paste the iframe URL there directly.

WordPress.com Free Plan

WordPress.com on the Free plan strips inline scripts as part of their hosting policy. Self-hosted WordPress.org has no such restriction. If you're on WordPress.com Free, the iframe embed is the only path to displaying Google reviews short of upgrading.

URL-Only Embed Slots

Notion, some wikis, and headless CMSes whitelist embeds by domain rather than by script. The iframe URL pastes directly into their "Add an embed" or "Embed URL" field — no HTML editing required.

HTML Newsletters and Email Signatures

Most email clients strip both scripts and iframes, but some preserve iframes (HubSpot signatures, certain Apple Mail templates). It's a coin flip — test before relying on it. When it works, iframe is the only viable path because no email client allows scripts.

Compliance-Strict Environments

Healthcare, legal, and government sites that audit every <script> on a page often prefer iframes because the JavaScript surface area is fully sandboxed in a sub-document. Easier security review, fewer audit exceptions.

BlooTrue iFrame vs Script-Only Google Review Tools

Most Google review tools only ship <script> snippets. If your CMS strips scripts, they don't work at all.

CapabilityBlooTrue iFrameScript-only widgets
Works on script-stripping CMSes
—
Direct iframe URL published
—
No JavaScript loader on host page
—
Free embed
Higher tier
unlimited widget views
—
Auto-resize iframe to content——
Pricing for full customization$9/mo$15+/mo

Want a side-by-side with a specific competitor? BlooTrue vs Elfsight

Pricing as of April 2026. Yotpo pricing from Yotpo's official reviews page; Stamped pricing from Stamped's official pricing page; Reviews.io pricing from Reviews.io's official pricing page; Elfsight pricing from Elfsight's official pricing page.

Google Review Widget for iFrame — Universal Embed for Script-Restricted Environments

BlooTrue's Google Review Widget for iFrame is a free embed for environments that don't allow <script> tags — locked-down CMSes, intranet portals, email-style HTML, and any platform that strips JavaScript loaders. It's the universal escape hatch when the standard script embed is blocked. Common targets: locked-down enterprise CMSes that strip <script> tags as a security policy; email signature platforms (HubSpot, Apple Mail templates) where iframes sometimes survive but scripts almost never do; intranet portals like SharePoint and ServiceNow CMS where IT blocks third-party scripts; the old WordPress.com Free plan (which strips scripts); platforms with a "URL-only" embed slot like Notion, some wikis, and headless CMSes that whitelist by domain; and HTML newsletters where the recipient's email client strips scripts but preserves iframes (rare, but it exists).

Same renderer, different mount point

The iframe URL https://api.blootrue.com/api/widgets/embed/YOUR_ID/render is the same endpoint the standard <script> loader mounts internally. So iframe mode renders the exact same widget, just without the auto-resize and the script-driven mounting. Tradeoff: simpler integration, fixed height (you setmin-height manually). Visually pixel-identical to the script-embed output.

BlooTrue vs other Google review tools (iframe-direct mode)

Most Google review tools (Elfsight, Trustindex, Embed Social) only ship <script> snippets and don't publish a direct iframe URL. That means if your CMS strips scripts, those tools simply don't work. BlooTrue's iframe-direct mode means you can embed Google reviews on environments that flat-out reject scripts — SharePoint, ServiceNow, locked-down enterprise CMSes, WordPress.com Free, and so on.

About Google reviews in this widget

Your Google widget shows the reviews on your Google Business Profile, and the number above the cards is the Google rating and review count as Google reports them, not an average of the cards. Anyone with a Google account can rate you from Maps or Search, no purchase needed. Google offers no review embed and the Business Profile has no widget, so pasting a Maps embed gives owners a map, not reviews. The free plan keeps the 4-star-and-up Google reviews imported at creation; a review left on Maps next week needs a paid plan's daily refresh.

Frequently Asked Questions

Why does the rating in my Google widget not match the average of the reviews it shows?

Because the header number is what Google publishes for your Business Profile, not a figure BlooTrue works out from the cards. The free plan shows only your 4-star-and-up Google reviews, so averaging those cards would give a higher number than Google does. Keeping Google's rating and count means visitors see the figure from Maps.

Can I get an embed code for reviews from my Google Business Profile?

No. The Business Profile gives you a link for asking customers to review you, but no embed code and no widget. The BlooTrue builder finds your profile when you type the business name, city and country, then hands you a one-line embed to paste into your website with no plugin, in about a minute.

Will embedding Google reviews put star ratings under my site in Google search?

No. Google's review-snippet rules exclude reviews a business shows about itself through an embedded widget. A paid widget still emits schema.org Review and AggregateRating JSON-LD carrying your Google rating, and that markup reaches your page when the builder renders the embed inline rather than in a sandboxed iframe, so search engines and AI assistants can read your reviews as structured data.

Why would I use the iframe embed instead of the standard script embed?

Use the iframe embed when the host environment strips or blocks <script> tags. The standard script loader is the recommended path because it auto-resizes and mounts inline with the host page. But many environments — locked-down enterprise CMSes, SharePoint, ServiceNow, WordPress.com Free, intranet portals, HTML newsletters — strip scripts as a security policy.

What environments require the iframe-only embed?

Common ones include: locked-down enterprise CMSes that strip <script> tags as a security policy; SharePoint and ServiceNow intranet portals where IT blocks third-party scripts; the WordPress.com Free plan (which strips scripts); Notion and other headless CMSes that whitelist embeds by domain; some wikis and knowledge bases that allow only iframe URLs; and HTML newsletters where the recipient's email client preserves iframes but strips scripts. Email signatures (HubSpot, Apple Mail templates) are an edge case where iframes sometimes work and scripts almost never do.

How do I find my widget ID after generating an embed code?

Generate the standard embed code in the BlooTrue builder, then read the <div> class. Your ID is the part after blootrue-widget- — for example, in class="blootrue-widget-abc123" the ID is abc123. Copy that string into the iframe src URL: https://api.blootrue.com/api/widgets/embed/abc123/render.

Can I auto-resize the iframe to match the widget content?

No — and this is the main tradeoff of iframe mode. Cross-origin iframes can't communicate their natural height back to the parent page without postMessage, and most script-restricted environments also strip postMessage handlers. So you have to set a manual min-height on the iframe.

Will the widget look the same as the script-embed version?

Yes. The iframe URL https://api.blootrue.com/api/widgets/embed/YOUR_ID/render is the same endpoint the script loader mounts internally. Same renderer, same Google reviews, same theme, same layout — pixel-identical visual output. The only difference is the mount strategy: instead of the script injecting the widget into a <div> on your page, the iframe loads the rendered widget in a sub-document.

Can I embed the iframe in an email signature?

Maybe — it depends on the email client. Some email signature platforms (HubSpot, Apple Mail templates with HTML support) preserve iframes; most strip both scripts and iframes. Outlook, Gmail web, and the major mobile clients reliably strip iframes. If your platform allows iframes in signatures, paste the same iframe tag described above.

Does the iframe embed have the same SEO benefits as the script embed?

No — and this is a meaningful tradeoff. The schema.org Review and AggregateRating JSON-LD lives inside the iframe document, not on the host page. Google does not bubble schema from a cross-origin iframe up to the parent page, so star rich snippets won't fire on the host URL via the iframe embed.

Ready to Embed Google Reviews via iFrame?

Build your free widget in 60 seconds, swap the snippet for an iframe, and paste anywhere HTML is allowed.

Build Your Widget