Creating a plugin to sanitize comment and the url field before display only
You might want to check out the comments_array filter. In 3.5, it is applied in Line 891 of wp-includes/comment-template.php: $wp_query->comments = apply_filters( ‘comments_array’, $comments, $post->ID );