In the malware, safe browser mode, there's UI that should be marked as a header for VoiceOver. <rdar://problem/70109074>
Created attachment 410908 [details] patch
Committed r268277: <https://trac.webkit.org/changeset/268277> All reviewed patches have been landed. Closing bug and clearing flags on attachment 410908 [details].