Creating a plugin to sanitize comment and the url field before display only

You might want to check out the comments_array filter.

In 3.5, it is applied in Line 891 of wp-includes/comment-template.php:
$wp_query->comments = apply_filters( 'comments_array', $comments, $post->ID );