Nicholas Drozd <nicholasdrozd@gmail.com> writes:

> In 27, it looks like this:
>
> #+begin_src
> $ bash password.sh
> Password:
> asdf
> $
> #+end_src
>
> The password (=asdf=) gets input directly into the shell buffer, unstarred.

I'm able to reproduce the behaviour in Emacs 27 and 28.  However, if you
say this:

echo -n "Password:"
read -sr password

Then Emacs will *** the password in the minibuffer, so comint only
triggers the password-reading behaviour if there's no newline there.

Now, Emacs 26 did handle this...  somewhat: