How could it possibly break your site? It's a simple URL hash. Your site looks and functions exactly the same with or without it.
Facebook adds it onto the return URL. No, it can't be removed as far as I'm aware. Facebook isn't supposed to be adding that if the redirect_uri is sent with the request. CB Connect does send the redirect_uri so I've no idea why Facebook still appends that.