how to pass list as parameter in sql query

1private static String sqlFormatedList(List<String> list){
2     StringBuilder sb = new StringBuilder();
3     sb.append("('");
4     for (String i : list){
5       sb.append(i+"','");
6     }
7     sb.deleteCharAt(sb.length() -1);
8     sb.deleteCharAt(sb.lastIndexOf(","));
9     sb.append(")");
10     return sb.toString();
11    }
12