6.8.1.3 Security
Unlike some other popen functions, this implementation will never call /bin/sh implicitly. This means that all characters, including shell metacharacters, can safely be passed to child processes.
See About this document... for information on suggesting changes.