these are my exceptions:
components/com_k2/k2.php
components/com_k2/js/k2.js
media/k2/galleries
components/com_uddeim/captcha15.php
components/com_virtuemart/fetchscript.php
administrator/components/com_extplorer/fetchscript.php
plugins/system/GoogleGears/gears-manifest.php
plugins/content/jw_allvideos/includes/jw_allvideos_scripts.php
plugins/content/jw_sigpro/sigpro.engine.php
plugins/content/jw_sigpro/sigpro.download.php
administrator/components/com_akeeba/restore.php
administrator/components/com_admintools/restore.php
and these are the diretories listed for front-end allowed exceptions:
components
modules
templates
images
plugins
media
With front-end protections disabled they work fine...
http://www.gertrudezachary.com
the front-end protections are currently "off" or "no"...