Recursively executing `execCommand()` should be prevented

[gmta]

All major browsers refuse to execute execCommand() recursively and return false, e.g. when calling it inside an input event handler as a result of another execCommand(). This is missing from the current spec.