Issue #14616: Mention shlex.quote in subprocess docs.

Patch by Chris Rebert.

diff --git a/Doc/library/subprocess.rst b/Doc/library/subprocess.rst
index 66d6cbbd646dd13da6d20f65a0e066b016239685..34fdf106a324816f667d59c2804c26aeb009843d 100644 (file)
--- a/Doc/library/subprocess.rst
+++ b/Doc/library/subprocess.rst
@@ -341,6 +341,10 @@ default values. The arguments that are most commonly needed are:
       from this vulnerability; see the Note in the :class:`Popen` constructor
       documentation for helpful hints in getting ``shell=False`` to work.
 
+      When using ``shell=True``, :func:`shlex.quote` can be used to properly
+      escape whitespace and shell metacharacters in strings that are going to
+      be used to construct shell commands.
+
 These options, along with all of the other options, are described in more
 detail in the :class:`Popen` constructor documentation.