DECLARE @TblName varchar(500) = NULL

SELECT TABLE_NAME + '.' + COLUMN_NAME AS 'column_name'
FROM information_schema.columns
WHERE table_name in (@TblName) ORDER BY table_name

here i am passing @TblName = 'Customer','Employee' from c# code but its not working and when i pass same( 'Customer','Employee' ) in above query it works fine.

so my question is whats the proper format to pass string that contains single quotes and comma separated values in sql.