Deploy to something other than "course uploads"
We can deploy the exercises to totem-project.org
instead of course uploads. This way we can update the exercises without having to re-upload them to all the courses.
I propose we upload them to totem-project.org/js-components
. XSS protection should not be a problem because it's on the same domain and on a higher subdomain (root).