After tinkering with the comment functionality, notice that the backend will directly takes whatever inside the website input box and attach it to the href anchor as shown here. One thing to note is that the http: prepend filter is not present for this lab:

So we can simply use the payload javascript:alert(1) to solve the lab. Simple