src/main/java/org/apache/commons/validator/ValidatorAction.java (4 lines):
	- line 367: * TODO if the path begins with a '/' the path will be intepreted as
	- line 422: final BufferedReader reader = new BufferedReader(new InputStreamReader(is)); // TODO encoding
	- line 521: // TODO What is this the correct value type?
	- line 575: // TODO This catch block remains for backward compatibility.  Remove


src/main/java/org/apache/commons/validator/Field.java (3 lines):
	- line 46: // TODO mutable non-private fields
	- line 330: // TODO this first if check can go away after arg0, etc. are removed from dtd
	- line 815: * TODO ValidatorAction should know how to run its own dependencies.


src/main/java/org/apache/commons/validator/ValidatorResult.java (2 lines):
	- line 29: //TODO mutable non-private fields
	- line 42: * TODO This variable is not used.  Need to investigate removing it.


src/main/java/org/apache/commons/validator/ValidatorResources.java (1 line):
	- line 52: //TODO mutable non-private fields


src/main/java/org/apache/commons/validator/Form.java (1 line):
	- line 39: //TODO mutable non-private fields


src/main/java/org/apache/commons/validator/ValidatorResults.java (1 line):
	- line 30: //TODO mutable non-private fields


src/main/java/org/apache/commons/validator/GenericValidator.java (1 line):
	- line 159: // TODO method isValid() not yet supported in routines version


src/main/java/org/apache/commons/validator/Validator.java (1 line):
	- line 29: // TODO mutable fields should be made private and accessed via suitable methods only


src/main/java/org/apache/commons/validator/Msg.java (1 line):
	- line 27: //TODO mutable non-private fields


src/main/java/org/apache/commons/validator/routines/ISSNValidator.java (1 line):
	- line 195: final String issnBase = input.substring(3,10); // TODO: how to derive these


src/main/java/org/apache/commons/validator/Arg.java (1 line):
	- line 36: //TODO mutable non-private fields


src/site/xdoc/tasks.xml (1 line):
	- line 27: <section name="TODO list">


src/main/java/org/apache/commons/validator/UrlValidator.java (1 line):
	- line 335: // TODO: Rewrite to use ArrayList and .add semantics: see VALIDATOR-203


src/main/java/org/apache/commons/validator/routines/UrlValidator.java (1 line):
	- line 113: // TODO does not allow for optional userinfo.