Web - Client

I cant understand the target of this challenge, I’m sure i can inject payload to affect this.data,i can modify window.location to this.url，but I cant pass the challenge,can you give me a hint?