diff --git a/TODO b/TODO
index 206057b264e725355ba2ea9b49b135e629c5591e..08df1f5fc0ef64090b601e84998addab5bdc2d80 100644
--- a/TODO
+++ b/TODO
@@ -1,18 +1,26 @@
 * Question logique
   - [ ] pour ***que*** l'expression suivante ***retourne*** true.
-  - [ ] 
-
+  - [ ]
 * Collections de programmes + randomisation + résultat
 ** Features
 - [X] Code colorization
 - [X] Code area just of the proper height
 - [X] Selection of topic based on file prefix
 - [X] Output dans un textarea
-- [ ] Why are empty lines on top and bottom of the text aread
+- [ ] Why are there empty lines at the top and bottom of the text shown?
 - [ ] Randomization of the variable names
 - [ ] Randomization of the output by substitution (preprocessing)
 - [ ] Implement more logic in WIMS
 - [ ] Onsite compilation and production of the output
+      - See .../docker-compile-and-run for preliminary steps toward
+        using docker to compile and execute the programs in a sandbox
+
+      - Next step: discuss with Bernadette to include that script (or
+        some equivalent) in Orsay's WIMS server, and rewrite the
+        module to use it.
+
+      - References:
+        http://askubuntu.com/questions/477551/how-can-i-use-docker-without-sudo
 - [ ] Support for various programming languages, based on file extension
 - [ ] Separate clearly the expected output from the rest of the text
 ** Programs
diff --git a/test~coding~readingCppPrograms.fr/docker-compile-and-run b/test~coding~readingCppPrograms.fr/docker-compile-and-run
index 9b0aff8437ee68b942998fd76407f82de7e47334..1621a59c3555e72b1241a5f19e79713b10a1bead 100755
--- a/test~coding~readingCppPrograms.fr/docker-compile-and-run
+++ b/test~coding~readingCppPrograms.fr/docker-compile-and-run
@@ -1,5 +1,8 @@
 #!/bin/sh
 
+# TODO:
+# - set tight resources limits
+# - make this into a program rather than a shell script for a minimum of safety
 
 usage () {
     echo docker-compile-and-run [program.cpp]