IE6/7/8/9中Table/Select的innerHTML不能赋值

IE6/7/8/9中Table/Select的innerHTML赋值会报错，如下

<!DOCTYPE HTML>
<html>
<head>
	<meta charset="utf-8">
	<title>IE6/7/8/9中TABLE的innerHTML不能赋值</title>
</head>
<body>
<script type="text/javascript">
	try{
		var table = document.createElement('table');
		table.innerHTML = '<tr><td>Test table innerHTML</td></tr>'
		document.body.appendChild(table);
	}catch(e){
		alert(e);
	}
</script>
</body>
</html>

IE6/7 :

IE8 :

IE9 :

Firefox/Safari/Chrome/Opera中正常。Ext.DomHelper中使用div，把table添加到div中间接实现。

MSDN 写道

The property is read/write for all objects except the following, for which it is read-only: COL, COLGROUP, FRAMESET, HEAD, HTML, STYLE, TABLE, TBODY, TFOOT, THEAD, TITLE, TR. The property has no default value.
DHTML expressions can be used in place of the preceding value(s). As of Internet Explorer 8, expressions are not supported in IE8 mode. For more information, see About Dynamic Properties.

Select元素的innerHTML也不能赋值，

<!DOCTYPE HTML>
<html>
<head>
	<meta charset="utf-8">
	<title>IE6/7/8/9中Select的innerHTML不能赋值</title>
</head>
<body>
<script type="text/javascript">
	try{
		var select = document.createElement("select");
		select.innerHTML = '<option value="1">one</option>';
		document.body.appendChild(select);
	}catch(e){
		alert(e);
	}
</script>
</body>
</html>

但不抛异常。