diff -r be83cbf4a789 Doc/library/subprocess.rst
--- a/Doc/library/subprocess.rst	Sun Oct 28 08:48:28 2012 +0100
+++ b/Doc/library/subprocess.rst	Sun Oct 28 01:28:43 2012 -0700
@@ -341,6 +341,10 @@
       from this vulnerability; see the Note in the :class:`Popen` constructor
       documentation for helpful hints in getting ``shell=False`` to work.
 
+      When using ``shell=True``, :func:`shlex.quote` can be used to properly
+      escape whitespace and shell metacharacters in strings that are going to
+      be used to construct shell commands.
+
 These options, along with all of the other options, are described in more
 detail in the :class:`Popen` constructor documentation.