proper syntax for exclusions

If I want to completely disable shellcode injection protection, can I do that by making an exclusion like this:
Or is there a better way to do it?

Second question: if I want to add the recycle bin to protected data, is this correct?

Just use the all applications file group which contains only one wildcard character which is only needed to cover all file paths. Yes that looks to be the right way to define the recycle bin.

Thanks, futuretech.