[PATCH 4/6] mshtml: Use the dispex's query_interface for Document nodes and fragments.