It seems that the cause was apache and mod_php
sending back un-interpreted source code as opposed to output, due to either
a server misconfiguration or high load (this is a known issue).
http://www.techcrunch.com/2007/08/11/facebook-source-code-leaked/