General:

CHECKED>Don't serve files with creator code: 
CHECKED>Prohibit root-relative file paths
 
Cloaking:

CHECKED>Prohibit EXEC_CGI tags
CHECKED>Only process macros listed in "NetCloak.macros"