mshtml: Use stored nsdoc in createTextRange.