Rebuilt from the ground up as a Joomla 6-native plugin (PSR-4, SubscriberInterface, DI container via services/provider.php, WebAssetManager), inspired by the discontinued Glimlag "Custom Right Click for Joomla 3.X" extension.

Features

• Apply rules to specific user groups only (or everyone)
• Disable printing (Ctrl/Cmd+P + print-output content hiding), delivered via an external stylesheet so it isn't dropped by a site's Content-Security-Policy the way an inline `` can be
• Disable text selection & copying (form fields stay usable)
• Disable image dragging (and suppresses iOS/WebKit's long-press "Save Image"/"Save Video" callout, which right-click/drag prevention alone does not affect)
• Discourage saving the page (blocks Ctrl/Cmd+S only - the browser's own menu offers the same "Save page as..." action and cannot be blocked from a web page)
• Discourage developer-tools keyboard shortcuts (F12, Ctrl+Shift+I/J/C, Cmd+Opt+I/J/C, Ctrl/Cmd+U) - a minor deterrent, not a security measure; DevTools remain reachable via the browser's own menu regardless
• Skip protections on interactive elements by default (links, form fields, buttons, editable content) - keeps the normal "right-click a link to open it in a new tab" gesture and form usability intact; turn off to block truly everywhere
• Four right-click modes: default / disabled with popup / images-only (/ only by default, with opt-in toggles to also cover video and CSS background images) / fully custom menu
• Custom context menu builder: link or built-in action items (reload, copy URL, print, scroll to top, share), with icons, a {url} placeholder for links, and open-in-new-tab — no arbitrary code execution is possible anywhere in the plugin. Copy/share actions work on plain HTTP too (not just HTTPS), with a three-tier fallback (Clipboard API → execCommand → a manual, pre-selected "press Ctrl+C" box) so they never silently fail
• Full keyboard accessibility: focus trap in the popup, roving-tabindex arrow-key navigation in the custom menu, focus returned on close
• Touch-device long-press (500ms) opens the popup/custom menu the same way a desktop right-click does - needed because iOS Safari largely does not fire a contextmenu event on long-press at all
• Exclude specific components or URL paths from the plugin entirely
• Admin-defined custom keyboard shortcuts, with exact modifier matching and Ctrl/Cmd cross-platform support
• Additional CSS "exception selectors" so a custom widget or web component the built-in exemption list doesn't recognise can be added without waiting for a plugin update
• Optional `` warning banner for visitors without JavaScript - purely informational, never hides page content (none of this plugin's protections apply without JS anyway)
• Prevent framing on other sites (X-Frame-Options: SAMEORIGIN) - a distinct, HTTP-level protection independent of JavaScript
• Follows the site template's own light/dark theme (data-bs-theme / data-color-scheme) rather than the visitor's OS preference, respects prefers-reduced-motion, and uses logical CSS properties for RTL