youtube pattern should allow https