If I'm reading the CMv3 docs correctly, the new approved way to get nested state info is to use `CodeMirror.innerMode()`--in this case, `CodeMirror.innerMode(ctx.token.state)` should hand you back the HTML state. It looks like the `php` mode implements this, so maybe we should make use of it.