Yes. I have tried this in multiple production apps (including legacy monoliths). As a result, the team was able to identify and fix about 1000 vulnerabilities in the projects.