ws-security-common/src/main/java/org/apache/wss4j/common/util/InetAddressUtils.java (1 line):
	- line 45: private static final Pattern IPV4_MAPPED_IPV6_PATTERN = // TODO does not allow for redundant leading zeros


ws-security-dom/src/main/java/org/apache/wss4j/dom/str/DerivedKeyTokenSTRParser.java (1 line):
	- line 114: // TODO Handle malformed SAML tokens where they don't have the