src/main/java/org/apache/commons/logging/LogFactory.java (1 line): - line 859: // TODO: think about whether we need to handle exceptions from newFactory src/main/java/org/apache/commons/logging/impl/LogFactoryImpl.java (1 line): - line 894: // TODO: use AccessController when dealing with class loaders here