Adds function js_mstime_malloc

This function takes advantage of MSTIME's CTIMEAnimationBase::put_values
function that's suitable for a no-spray technique (based on wtfuzz's
PoC for MS13-008)
Updates documentation
According to MSFG, I can use RGB, so here goes
Uses rand_text_hex for RGB values, and correcting exception handling
Make animatecolor element optional by using innerHTML
Land @1785, @wchen-r7's API addition for the mstime ie8 technique