We are also looking for a solution to block the querybuilder on publisher. We denied access to /bin. But we have to allow few extensions /0040 { /type "allow" /extension '(css|jpg|gif|ico|js|xml|txt)' } We blocked CSS as below /0120 { /type "deny" /path "/bin/querybuilder*" /selectors '(feed|servl...