The binding target. Setting it reparents the node. An "invalid" node type is allowed on purpose: see mozilla/js/tests/js1_7/block/regress-350279.js.