According to the HTML5 spec, anything else in the "in table" insertion mode is a parse error. http://www.whatwg.org/specs/web-apps/current-work/multipage/tree-construction.html#parsing-main-intable 12.2.5.4.9 The "in table" insertion mode Anything else Parse error. Process the token using the rules for the "in body" insertion mode, except that whenever a node would be inserted into the current node when the current node is a table, tbody, tfoot, thead, or tr element, then it must instead be foster parented.
Created attachment 153636 [details] Patch
Comment on attachment 153636 [details] Patch Clearing flags on attachment: 153636 Committed r123284: <http://trac.webkit.org/changeset/123284>
All reviewed patches have been landed. Closing bug.