diff -r 09011896374d Doc/library/subprocess.rst
--- a/Doc/library/subprocess.rst	Sat Sep 15 08:34:47 2012 +0300
+++ b/Doc/library/subprocess.rst	Fri Sep 14 23:36:59 2012 -0700
@@ -341,6 +341,10 @@
       from this vulnerability; see the Note in the :class:`Popen` constructor
       documentation for helpful hints in getting ``shell=False`` to work.
 
+      When using ``shell=True``, :func:`shlex.quote` or :func:`pipes.quote`
+      can be used to properly escape whitespace and shell metacharacters in
+      strings that are going to be used to construct shell commands.
+
 These options, along with all of the other options, are described in more
 detail in the :class:`Popen` constructor documentation.