Widget Domain Validation

Domain validation restricts which websites can load your ReviewPanel widget, preventing unauthorized embedding.

What it does

When domain validation is enabled, the widget script checks the requesting domain against your allowlist before rendering. If the domain isn't authorized, the widget won't load and the request is logged.

How to configure

  1. 1 Go to your widget settings in the dashboard.
  2. 2 Open the Domain Validation section.
  3. 3 Add the domains where your widget is allowed to load.

Wildcard support

Use wildcard patterns to allow all subdomains of a domain:

# Allows example.com and all subdomains*.example.com
# Specific domain onlywww.example.com

Unauthorized domain behavior

When an unauthorized domain attempts to load your widget:

  • The widget is blocked from rendering.
  • The attempt is logged in your widget analytics.

Check your widget analytics to see if anyone is attempting to embed your widget on unauthorized sites.

Rate limiting

Widgets include built-in rate limiting on both a per-widget and per-IP basis. This prevents abuse and excessive API calls without any configuration on your part. Rate limits are generous enough for normal traffic patterns.

See also: Install a Review Widget