How can I have ClickToFlash except for YouTube? I use the ClickToFlash Safari extension, out of concern for Flash security vulnerabilities and to remove annoyances. However, I do not like its replacements for YouTube video players over YouTube's own player.

How can I configure ClickToFlash so that it does not affect YouTube players (whether on YouTube pages or embedded), but blocks/replaces all other Flash? Putting “www.youtube.com/” in the “Allow Flash on these sites:” list works for YouTube itself, but not embedding.
bmike's comment prodded me into actually, y'know, reading the manual, which led me to find that the whitelists are in fact substring matches. Therefore these settings work:



I had to find the /v/ URL by looking at the source of a page with a YouTube embedding.