Servlet spec says that you can have only one value for any context parameter. So, you are left with going with delimited list only.
<context-param>
<param-name>validHosts</param-name>
<param-value>example1.com,example2.com,.....</param-value>
</context-param>