kvstore_filesystem: Merge policy now picks the most recent value.

Pruning of non-chosen values is not in this change, but will be in a
subsequent one.
kvstore_filesystem: Removing unused variable.
libinjection: Add XSS support via is_xss operator.