I believe you recently might have posted about this as there is an almost identical post asking for the exact same thing and Giorgio already responded. If you are the same person, please don't multiple post and stick with just one topic. In case you are not, my apologies but you could have posted in the same topic with a search would have found for you.
As far as using blocking on whitelist too being paranoid, to each their own but I deal in security all day long and I don't apply on whitelist sites since NS and I haven't had any issue. So probably not applying to whitelist would be fine but again to each their own. You need to tweak the expression to allow just on Youtube, but I will leave Giorgio deal with that part.
But a quick look, your RegEx portion is just fine, I just believe your inclusion of the MIME type at the beginning is breaking it, which is ironic as this is exactly what Giorgio has posted on the features page of NoScript as an example. I suggest you remove that and just use the RegEx portion and see if it works. Try "@https?://[^/]+\.(?:youtube|ytimg)\.com" or just "https?://[^/]+\.(?:youtube|ytimg)\.com" because they both worked for me, so if there is anything relevant to add, Giorgio will comment, but perhaps things have changed over time that affect how that is handled, not sure.
As far as using blocking on whitelist too being paranoid, to each their own but I deal in security all day long and I don't apply on whitelist sites since NS and I haven't had any issue. So probably not applying to whitelist would be fine but again to each their own. You need to tweak the expression to allow just on Youtube, but I will leave Giorgio deal with that part.
But a quick look, your RegEx portion is just fine, I just believe your inclusion of the MIME type at the beginning is breaking it, which is ironic as this is exactly what Giorgio has posted on the features page of NoScript as an example. I suggest you remove that and just use the RegEx portion and see if it works. Try "@https?://[^/]+\.(?:youtube|ytimg)\.com" or just "https?://[^/]+\.(?:youtube|ytimg)\.com" because they both worked for me, so if there is anything relevant to add, Giorgio will comment, but perhaps things have changed over time that affect how that is handled, not sure.