Editorial: make CORS settings attributes consistent

Helps with whatwg#9832.

source

@@ -7324,29 +7324,28 @@ a.setAttribute('href', 'https://example.com/'); // change the content attribute
 
   <h4>CORS settings attributes</h4>
 
-  <p>A <dfn>CORS settings attribute</dfn> is an <span>enumerated attribute</span>. The following
-  table lists the keywords and states for the attribute &mdash; the states given in the first cell
-  of the rows with keywords give the states to which those keywords map.</p>
+  <p>A <dfn>CORS settings attribute</dfn> The attribute is an <span>enumerated attribute</span> with
+  the following keywords and states:</p>
 
   <table>
    <thead>
     <tr>
+     <th> Keyword
      <th> State
-     <th> Keywords
      <th> Brief description
    <tbody>
     <tr>
-     <td rowspan=2><dfn data-x="attr-crossorigin-anonymous">Anonymous</dfn>
      <td><dfn attr-value for="audio/crossorigin,video/crossorigin,img/crossorigin,link/crossorigin,script/crossorigin"><code data-x="attr-crossorigin-anonymous-keyword">anonymous</code></dfn>
+     <td rowspan=2><dfn data-x="attr-crossorigin-anonymous">Anonymous</dfn>
      <td rowspan=2><span data-x="concept-request">Requests</span> for the element will have their
      <span data-x="concept-request-mode">mode</span> set to "<code data-x="">cors</code>" and their
      <span data-x="concept-request-credentials-mode">credentials mode</span> set to "<code
      data-x="">same-origin</code>".
     <tr>
      <td>(the empty string)
     <tr>
-     <td><dfn data-x="attr-crossorigin-use-credentials">Use Credentials</dfn>
      <td><dfn attr-value for="audio/crossorigin,video/crossorigin,img/crossorigin,link/crossorigin,script/crossorigin"><code data-x="attr-crossorigin-use-credentials-keyword">use-credentials</code></dfn>
+     <td><dfn data-x="attr-crossorigin-use-credentials">Use Credentials</dfn>
      <td><span data-x="concept-request">Requests</span> for the element will have their <span
      data-x="concept-request-mode">mode</span> set to "<code data-x="">cors</code>" and their <span
      data-x="concept-request-credentials-mode">credentials mode</span> set to "<code