I would be more specific in the use of wildcards as you are opening up a hole in security, exclude the specific file or file type.

e.g. [nobbc]http://www.jango.com/*.js[/nobbc] or better still [nobbc]http://www.jango.com/*/play/*[/nobbc], which just excluded the play folder content. Though I would prefer it if you found the particular script file or file type causing the activity in the play folder and exclude that, as this maintains your protection and only allows the specific file.