third_party/blink/web_tests/fast/forms/input-value.html
Results that match WinIE are two columns on the right that say "after" every time, except for the last row which should have nothing in either column.
Results that match Gecko are like WinIE, but with "before" for the attribute in the first two rows and the last row.
test case | form element | property | attribute || text with value property changed | | | | | password with value property changed | | | | | check box with value property changed | | | | | hidden with value property changed | | | | | button with value property changed | | | | | image with value property changed | | | | | radio with value property changed | | | | | text with value attribute changed | | | | | check box with value attribute changed | | | | | text with value property changed, then turned into check box | | | | | check box with value property changed, then turned into text | | | | | text with value attribute changed, then turned into check box | | | | | check box with value attribute changed, then turned into text | | | | | file with value property changed | | | |