Don't categorize HTMLInputElement as a TableCellFragment

Closes  #4196.

r? @jdm