Document document.execCommand with insertHTML

[zcorpan]

https://htmlparser.info/scripting/#other-parser-apis

Other parser APIs

document.execCommand with insertHTML is missing.

Also see w3c/trusted-types#345 (h/t @apple502j) as a case study for the security chapter.